A text message styled like an official government notice has been landing on mobile phones across Nigeria. "FRSC: You have a new road traffic offence record that requires handling," it reads — language that mimics the kind of communication typically sent by government agencies. Despite its official appearance, the message is a scam. The Federal Road Safety Corps (FRSC), the agency being impersonated, has stepped forward to warn citizens about a fraudulent campaign that directs people to fake websites under the guise of resolving alleged traffic violations.

The scam's design is central to its effectiveness. Rather than dangling an obviously dubious offer or a too-good-to-be-true investment opportunity, it opens with a scenario many drivers can relate to: the possibility of having committed a traffic offence. By claiming that a new violation has been recorded, the message creates an urgent call to action, pushing recipients to click links that lead to fraudulent sites. The pretext is not unique to Nigeria — authorities in several other countries have issued comparable warnings about traffic-fine texts, a measure of how reliably the template travels across borders.

One of the specific websites flagged by the FRSC is frscgov.top/ng, which the agency says is not affiliated with it in any way. For genuine information, the FRSC directs the public to its official website at frsc.gov.ng.

Nearly identical messages, shared across social media

Recent online reactions point to a concerning and seemingly coordinated trend. Numerous Nigerians have begun posting screenshots of nearly identical SMS messages they received, raising suspicions about the origins and intent behind the communications.

Many of those reporting the messages said they had had no recent interactions with the FRSC, which raises an urgent question: how did the senders obtain personal information such as their phone numbers? As more people share their experiences, the need for answers becomes increasingly critical for those affected.

Concern deepened after one widely shared post on X in which a user raised the alarm that some recipients had actually transferred money after getting the messages, claiming that funds were later withdrawn from their accounts without consent.

Reports circulating on social media suggest the campaign is targeting larger cities, including Abuja, Lagos, and Port Harcourt. While these accounts stem from online discussions rather than verified statistics, the consistent nature of the messages shared by different users implies a coordinated effort rather than a one-off scam.

No proof of an FRSC data breach

The episode has left many people wondering whether their phone numbers were leaked in a data breach. So far, however, there is no solid proof that the FRSC was involved in any breach or that its government database was used to gather the numbers — a distinction that matters.

Scammers do not need to tap into an FRSC database to flood people with messages. They often rely on previously leaked lists of Nigerian phone numbers from various sources, including marketing databases and past breaches. Armed with such lists, they can launch mass SMS campaigns, sending the same message to thousands of people and hoping that even a few will take the bait.

The content of the messages does much of the work. Receiving one does not mean the recipient has done anything wrong, but the mere suggestion of an offence can create doubt and concern — especially for someone who has recently interacted with traffic officers and is worried that a violation may genuinely be on record.

Where the phishing happens

The fraudulent messages direct recipients to fake websites, and that is where the phishing occurs. The FRSC has warned the public against clicking any links or sharing sensitive information, such as bank details, passwords, or vehicle registration information.

The scam's goal is likely much broader than collecting supposed traffic fines. A fake traffic page, for instance, might request credit card details, transforming what looks like a simple informational site into a platform for stealing valuable payment data. That is also why the agency's advice centres on the links: card numbers or passwords entered on a fraudulent page can be reused against the victim's real accounts.

The domain name itself is a warning sign. frscgov.top might look legitimate, particularly when it arrives alongside an official-looking message, but the .top suffix is a red flag. The FRSC has explicitly stated that it has no connection with that domain.

'STOP. VERIFY. REPORT.'

The FRSC has issued a warning to Nigerians about the suspicious traffic-offence messages and advised members of the public to preserve any such messages, avoid engaging further, and verify any alleged offences through official channels. The agency's guidance is summed up in three words: "STOP. VERIFY. REPORT." In an advisory posted on its official X account, the corps also said it is committed to collaborating with law enforcement and cybersecurity experts to track those responsible for the impersonation attempts.

In the meantime, staying informed and cautious remains the best protection: verify communications from government entities and never rush into action prompted by urgent messages.

Unanswered questions

The warning nonetheless leaves many questions open. How many people have received the suspicious messages? How many clicked the provided links? And, crucially, how many ended up sharing personal information or credit card details? It remains unclear whether the messages were sent via bulk SMS services, hacked accounts, or some other method. Perhaps the most pressing query is where the scammers obtained the phone numbers in the first place. As of now, the FRSC has not addressed any of these concerns, with any updates expected to arrive through the same official channels — the corps' website and its X account — where the advisory first appeared.

There is no evidence suggesting the campaign stemmed from a breach of the FRSC's own systems. Nor can it be assumed that everyone who received a message was targeted on the basis of their vehicle registration. A more likely scenario is mass phishing: scammers send messages that appear to be from the government to a broad audience of Nigerian phone numbers, exploiting a sense of urgency, fear, or curiosity to ensnare victims. What may seem like an outlandish message to one person can appear entirely credible to someone who has recently dealt with traffic officers and fears a possible offence.

Once a scammer lures someone into clicking a link, the original message about the traffic offence loses its significance. The real danger lies in the personal information that may be divulged through those links.

The FRSC urges motorists to verify any traffic offences directly through its official resources — including its website and the national toll-free line 122 — instead of relying on unsolicited messages.