SCAM ALERT

How to Spot Fake Government Portal Clones

Cloned portals copy the real thing perfectly, except for the web address. Here is how to tell them apart.

Step by step

1. Read the full domain nameLook at the part just before the first single slash. Real portals end in .gov.ng (for example nimc.gov.ng, jamb.gov.ng, immigration.gov.ng, cbn.gov.ng). Be suspicious of .com, .net, .org, extra words, dashes, or misspellings like nimc-verify.com.
2. Reach sites the safe wayDo not click links in SMS, WhatsApp, email or social-media adverts. Type the official address yourself, use a trusted bookmark, or find the portal linked from the agency's main .gov.ng site.
3. Check the connection, then the nameConfirm the padlock and https, but remember that alone is not proof. Criminals also use secure connections, so the domain spelling is what really tells you if the site is genuine.
4. Be wary of pressure and odd paymentsClones push urgency ("verify within 24 hours") and ask for payment by transfer to a personal account or unusual gateways. Genuine portals use official payment channels and rarely threaten instant blocking.
5. Guard your sensitive dataNo legitimate portal login needs your card PIN, internet-banking password or an OTP shared with a person. If a "government" site asks for these, leave immediately.
6. Verify and reportIf unsure, cross-check the address on the agency's official site or call its verified line. Report cloned portals to the EFCC or the Nigeria Police cybercrime centre.

Why clones are so convincing

Copying how a website looks is trivial. Fraudsters download the images, colours and layout of a real portal and rebuild an identical-looking page in hours. What they cannot fake is the official web address. That is why the look of a site tells you almost nothing, while the domain name tells you almost everything.

The .gov.ng rule

Nigerian government services almost always live on a .gov.ng domain, such as nimc.gov.ng, jamb.gov.ng, immigration.gov.ng and cbn.gov.ng. Clones try to look close: they add words (nimc-portal-verify.com), swap the ending (jamb.gov.ng becomes jamb-gov.com), or use tiny misspellings that are easy to miss when you are rushing. Read the address slowly, character by character, and pay attention to the part right before the first single slash, that is the real domain.

Reach portals the safe way

The safest habit is to never arrive at a sensitive site by clicking a link in an SMS, advert or social-media post. Type the address yourself or use a saved bookmark. When you need a specific service, start from the agency’s main .gov.ng site and follow its own links. Our step-by-step guides, such as how to check your NIN and how to check your JAMB result, point you to the correct official channels each time.

Other warning signs

Beyond the domain, watch the behaviour of the site. Clones love urgency and threats of instant blocking, and they often ask for payment into a personal account or through an unfamiliar gateway. A genuine login will never need your card PIN, bank password or an OTP shared with a person. If a page crosses any of these lines, close it. Learning the pattern also helps you avoid related traps, such as fake result sites covered in how to spot fake JAMB and WAEC result websites, and the identity tricks in common NIN and BVN scams. If you have already submitted data to a clone, act on it as a compromise and contact your bank without delay.

SabiGuide is an independent guide and is not affiliated with any government agency. Fees, links and steps can change — always confirm on the official portal before you act. This is general information, not legal or financial advice.