You search "NIN slip" or "passport booking" on your phone, tap the second link, and land on a page with a green-and-white flag, a logo and a payment button. It looks right. It might be a copy built to take your money and your personal data.
Fake portals work because Nigerians do need government services constantly: NIN, passport, JAMB, NYSC, CAC, INEC, driver's licence. Scammers go where the search traffic is. This guide gives you a repeatable routine for confirming you're on the real site, plus what to do if you've already paid or submitted details.
One note up front: I'm not listing fees or prices here, because they change and you should only trust the figure shown on the agency's own site. Where I mention a process, confirm the current version at the official source.
Why fake portals and "agents" are so common
Three things make the problem worse in Nigeria.
- Official sites can be slow or down. When a real portal crashes, a lookalike that "works" feels like relief.
- Deadlines create panic. Registration windows, screening dates and portal reopenings make people click quickly.
- Social media amplifies everything. A forwarded WhatsApp link or a sponsored post looks like a tip from a friend.
The scam usually has one of two goals. Either it collects a payment for something that is free or cheaper at source, or it harvests your details (NIN, BVN, date of birth, phone, passport photo) for identity fraud. The second is often worse, because you won't notice for months.
Step 1: Start from the official homepage, not a search result
Search engines show paid adverts above real results, and scammers buy those adverts. Social posts and SMS links are even less reliable.
Instead, type the address yourself or use a bookmark you saved when you were sure. The homepages of the main agencies readers ask about are:
- NIN: nimc.gov.ng (National Identity Management Commission)
- Exams and admissions: jamb.gov.ng
- Youth service: nysc.gov.ng
- Business registration: cac.gov.ng
- Passports: immigration.gov.ng (Nigeria Immigration Service)
- Elections and party records: inecnigeria.org
Once you're on the real homepage, navigate from its own menus to the service you want. If a news item says "portal now open", find the link from the homepage rather than the post that mentioned it.
Step 2: Read the address bar properly
Most people glance at the page design. The design is the easiest thing to copy. The web address is the hardest.
- Read the part just before the first single slash. In nimc.gov.ng/services, the real domain is nimc.gov.ng. In nimc.gov.ng.verify-now.com/services, the real domain is verify-now.com, and the page is fake.
- Watch for added words. Things like "-portal", "-online", "-2026", "-registration" or "-help" attached to an agency name are red flags.
- Look for swapped letters. "jamb" written with a capital I instead of a lowercase l, or "rn" in place of "m", fools many people on small screens.
- Don't rely on the padlock. HTTPS only means the connection is encrypted. Scam sites have it too.
- Be careful with free-hosting and social-page addresses. An official agency will not collect payments through a free blog, a Telegram channel or a page on a social network.
Many federal agencies use addresses ending in .gov.ng, but not every genuine site does (INEC's is a good example). So the ending alone isn't proof. Compare against the address on the agency's verified social accounts or printed materials, such as the slip or letter you already received.
Step 3: Check how you're being asked to pay
Payment method is the clearest signal. Before you pay anyone for a government service, ask these questions:
- Is the payment going through a payment gateway or platform named on the agency's own site?
- Does the account name match the agency or a recognised payment platform, not an individual?
- Is the amount the same as the one published on the official site today?
- Will I get a receipt or payment reference that I can later confirm on the official portal?
If the answer to any is no, stop. A transfer to a personal account in the name of a person is not a government fee. Government agencies don't ask you to send "processing money" to an individual's account number on WhatsApp.
Worked example (hypothetical)
Say Amaka, a final-year student in Enugu, needs to fix a data mismatch before an exam registration deadline. A forwarded message says "Official portal reopened, pay ₦6,500 for priority correction to this link." She's tempted, because the deadline is in two days.
Using the routine above:
- She doesn't tap the link. She types the agency's homepage herself.
- She finds no mention of a "priority correction" fee. The real notice explains the process with no extra payment to an individual.
- She compares the link's address and finds the real domain is something unrelated to the agency.
- She reports the message and warns her class group.
The numbers here are made up, but the pattern is real: a rushed deadline, a small-looking fee, and a link you didn't find yourself. Many victims lose far more than the fee, because the form also asks for their NIN and a selfie.
Step 4: Protect the documents you upload
Even on a real portal, think about what you submit. On a fake one, these are the items scammers value most:
- NIN and BVN, which can be used to attempt SIM swaps or loan applications in your name.
- Passport photo or selfie with ID, used to pass identity checks.
- Email address and phone number, used for follow-up scams and password-reset attacks.
Use a strong, unique email password and turn on two-step verification on the email you used for the portal. If a form asks for your bank card PIN or an OTP "to verify", that is never legitimate. For more on securing accounts after your phone number or email is targeted, see our guide on SIM swap and email takeover.
Real versus fake: a quick comparison
| Check | Usually genuine | Warning sign |
|---|---|---|
| How you found it | Typed address or saved bookmark; link from the agency homepage | Advert, SMS, forwarded WhatsApp message, random comment |
| Web address | Matches the agency's known domain exactly | Extra words, odd endings, misspellings |
| Payment | Official gateway, receipt with reference | Transfer to a personal account, "pay to agent" |
| Language | Calm, specific instructions | "Last chance", "limited slots", "pay now or lose it" |
| Contact | Channels listed on the agency homepage | Only a personal WhatsApp number |
What about cybercafes and agents?
Not every helper is a scammer. Many cybercafe and registration-centre operators are honest and save people real time, especially with NIN, JAMB or passport forms. But you stay responsible for your data.
- Ask what the official fee is, and what their service charge is, separately.
- Insist on using your own email and phone number on the form, so password resets reach you.
- Don't leave your documents or login details with them.
- Log out and clear any saved details on a shared computer.
- Keep a copy of every reference number and receipt.
For help picking a centre for exam registration specifically, read our JAMB registration prep guide. For identity records, our NIN enrolment and linking guide shows what to expect at each stage.
Common mistakes to avoid
- Trusting a screenshot. Screenshots of "official notices" are easy to fake. Find the notice on the agency's own site.
- Paying first, checking later. Reverse the order every time.
- Reusing one password. If one fake site captures it, every account is exposed.
- Sharing the link in panic. If you forward an unverified link to your group, you may spread the scam. Verify first.
- Believing "insider" promises. Nobody can guarantee a quicker appointment, admission, posting or approval for a fee. That's the opening line of most fraud.
If you've already paid or shared your details
- Call your bank's official line (from the number on your card or the bank's website) and report the transaction immediately. Speed matters.
- Change passwords on your email first, then banking and fintech apps, and enable two-step verification.
- Watch your accounts and SIM. If your phone suddenly loses service, contact your network at once.
- Report the site to the real agency through the contact channels on its homepage, and keep screenshots of the page, address and payment details.
- Report impersonation to the police or relevant authority. Our piece on fake EFCC or police officers explains what follow-up scams to expect.
Recovery isn't guaranteed, so prevention is worth the extra minute.
Frequently asked questions
Is a site safe if it has the agency's logo and flag?
No. Logos are copied in seconds. Only the web address and the way you reached the site tell you anything useful.
Can I trust a link sent by a friend?
Your friend may have been fooled too. Treat it like any other link and open the official homepage yourself.
What if the official site is down?
Wait and try later, or check the agency's verified social accounts for notices. Don't switch to an unfamiliar "mirror" site.
Are ".com" sites always fake?
Not always, since some legitimate services use them, but a government service asking for money or personal data on an unfamiliar .com deserves extra suspicion. Confirm it from the agency homepage.
Where do I confirm current fees?
Only on the agency's own official site or its official payment page. Ignore fees quoted in comments, group chats or by agents.
Your next step
Right now, create a bookmarks folder called "Official Nigeria" and save the genuine homepages you use, starting with the ones listed above. Next time a deadline notice lands in your WhatsApp, you'll start from the folder, not the forwarded link.
Fees, dates, requirements and procedures change. Always confirm with the official agency or institution before you act.