A forged bank alert works because it reverses the order of a trade. The seller reads a text message or a "proof of payment" screenshot, believes the naira has arrived, and releases the coins. A blockchain transfer cannot be recalled, so minutes later, when the banking app shows no credit, the crypto is gone and all that remains is a fabricated message.

The defense fits in one rule: release crypto only after the money appears in your own bank account, checked inside your bank's own app. What follows explains how the forgery is produced, the three forms the scam takes, and how to test every payment before touching the release button.

A fake alert is a message, not a payment

Most forged alerts are made with software, not skill. Dubawa, the fact-checking project of the Centre for Journalism Innovation and Development, reported in February 2024 that scammers use "Flash fund" or "Flash alert" apps that mimic banking interfaces. The user types in a recipient name, an account number and an amount, and the app produces a message complete with a bank logo, a transaction reference and a date. Because the software fills in the logo, the reference and the date itself, none of those details can be read as evidence on its own — which is why the checks in this article look only at your bank's own records, never at the message. The target is almost always someone who hands over something valuable on the strength of that message alone.

The same report cites a January 2024 case in which Ondo State police said two suspects bought a car for ₦4.65 million with a fake transfer, and an earlier case from December 2021 in which Enugu police arrested a group accused of buying cars with fake alerts. Those were sales rather than crypto trades, but the mechanism is identical.

Cryptocurrency makes the same trick worse for one reason: finality. A car can sometimes be traced and recovered, but a coin released on-chain goes to an address the buyer controls and cannot be pulled back. The only protection is the order of operations — money first, confirmed by you, then crypto.

Three versions of the scam to recognize

The forged alert is the best-known pattern, but it is one of three, and each is built to fool a different check. Knowing which is which tells you what to verify.

The forged alert or screenshot. The buyer sends a message or a "proof of payment" image showing a transfer into your account. Nothing was sent. If you rely on the message, you lose the coins.

The real payment that gets reversed. Nairametrics, in a guide to P2P scams, describes a buyer who pays, waits for the seller to finish the trade, then tells the bank the transfer was not authorized. The bank refunds the buyer, and the seller loses both the crypto and the money. The lesson from that guide: seeing a credit once is not always the end of the story.

The payment from someone else's account. The buyer pays you from a third party's account, often one holding money from another fraud. Cointelegraph reported in March 2023 that after a court granted an ex parte order putting 107 accounts, plus their downstream beneficiaries, on lien or Post No Debit (PND) status following an alleged hack of a Nigerian fintech, some P2P users said their own accounts were frozen. A Post No Debit restriction blocks withdrawals and payments from an account. The fintech disputed that it was hacked, so the facts of that case are contested but the risk it describes is real: money from a tainted source can follow your account number.

Take the stranger out, or test every credit

Two defenses exist. The first is verification, covered in the next section. It works, but it asks you to be careful on every single trade, forever, against people whose job is to find the one trade where you are tired or in a hurry.

The other approach removes the counterparty. If you only need cash, you can sell bitcoin in Nigeria to a platform that pays you from its own balance, so nobody can send you a forged alert and there is no buyer to dispute the transfer later. Breet is an example of such platforms. Breet is a crypto-to-cash and payments platform for users and businesses in Africa. To sell Bitcoin, you get a deposit address, send the coin, and Breet converts it to naira at the rate shown before you confirm, with optional automatic settlement to your bank account. There is no buyer in the trade, so there are no fake payment proofs.

The second defense has a trade-off: you accept the platform's displayed rate instead of negotiating one with a person, and payout speed depends on blockchain confirmations. If you want to haggle for a premium over the market rate, P2P is still the route, and the checks in this article are the price of it.

A reasonable rule of thumb is to match the defense to the amount. For small, occasional trades, careful verification is usually enough. For larger or regular sales, every extra trade with a stranger is another draw from the same bag of bad outcomes, and that is where taking the counterparty out of the picture starts to make sense.

Check the credit in the right place

The only evidence that counts is a credit in your own account that you looked up yourself. An SMS can be spoofed, a screenshot can be edited, and an email can be forged. A transaction line in your bank's app is generated by the bank's own system, which a stranger cannot edit.

Here is what each piece of "proof" tells you, and how much weight it deserves:

• Screenshot of a transfer receipt: that someone made an image.
• SMS or email alert: that a message arrived, from a sender you did not verify.
• "Pending" or "processing" entry in the app: that a transfer was started, not that it settled.
• Settled credit in your bank app with a matching narration: that your bank recorded the money.
• Credit plus the sender's name matching the buyer's verified profile: that the money came from the person you are trading with.

Dubawa's advice matches this: after any alert, verify that the transaction is reflected in your account balance, and if the amount is not credited, treat the alert as fake. Open the app yourself, and do not use a link in the message — the same guide warns that fake alerts can carry links to malware or imitation sites.

Two details trip people up. Alerts can arrive late, and scammers use that gap to buy time, which is why a missing alert alone proves nothing either way. Only the account balance and transaction history settle the question. And do not confirm in a hurry: a buyer who pushes you to release "before the offer expires" is applying pressure for a reason.

A worked example with the cost of waiting

Say a Lagos seller offers 200 USDT, and the agreed rate is ₦1,500 per dollar — an assumption chosen only to keep the arithmetic easy. The expected payment is 200 × ₦1,500 = ₦300,000.

The buyer sends a screenshot showing ₦300,000 sent. The seller opens the banking app, sees no new credit, and waits five minutes. If the transfer is real, it will show. If it does not, the seller has lost five minutes and kept 200 USDT. Had the seller released first, a forged alert would cost the full ₦300,000 equivalent.

Five minutes against ₦300,000 is not a close call. The same logic applies to a first trade with a new counterparty: split a large sale into two parts, confirm the first credit, then release the rest. You lose a little speed and cap the damage at half.

What to say when a buyer pushes you to release

Pressure is part of the scam, so it helps to have lines ready. A short script keeps you from improvising when someone is typing "bro please" at you:

• "I release when the money shows in my app. It usually takes a few minutes."
• "The screenshot is not enough for me. I need to see the credit myself."
• "The name on the sending account does not match your profile. Please pay from an account in your own name."
• "If you cannot wait, we can cancel the trade."

The last line matters most. A genuine buyer can wait five minutes, and a fraudster cannot afford to. A buyer who cancels the moment you ask for patience has told you what you needed to know.

Escrow does not replace these lines. Nairametrics notes that P2P platforms lock the seller's crypto in escrow and release it when the seller confirms payment, which means the confirmation is still your decision, and your decision is the thing the scammer is targeting. The same guide advises that you should not rely on evidence supplied by the buyer.

If you already released the coins

Act fast, and expect that the coins themselves are gone. Take screenshots of the chat, the buyer's profile, the trade ID, the wallet address and the transaction hash, because police and platform support teams both ask for them. Report the trade to the P2P platform's support team and to the police, and tell your bank if you suspect the paying account was used fraudulently. Do this before you rest, because details fade fast.

Be careful about anyone who contacts you offering to "recover" the coins for an upfront fee. Blockchain transfers do not have a reversal desk, so unsolicited recovery offers deserve suspicion.

Make the rule physical and keep a trade log

Put the rule where you will see it at the moment of temptation: write "Credit in my app first" on a card next to your laptop or set it as the lock screen on the phone you trade from. It sounds trivial, and that is the point. Scams succeed when a good rule lives only in your head and the buyer is shouting in your inbox.

On the next trade, run the list above before you touch the release button, and keep a note of which row each payment fell into. After a month, the log shows you which counterparties paid cleanly, which paid from other people's accounts, and which asked you to hurry. That record is also useful if a bank ever asks you to explain where a credit came from.