₦2.9 Billion Hacked From Flutterwave Accounts
The sum of ₦2,949,557,867 has been illegally transferred from the accounts of Nigerian owned African fintech unicorn, Flutterwave.
On February 19, 2023, Flutterwave’s legal counsel, Albert Onimole, reported the case to the Deputy Commissioner of Police, State Criminal Intelligence Department, Panti, Yaba, Lagos.
Per Onimole’s letter, the hack on Flutterwave’s accounts occurred about 2 weeks ago from February 13. It was said that the money was initially transferred to 28 accounts in 63 transactions. While the incident was reported to the police on February 13, 2023, with the list of accounts that had received the money, the police could not freeze the funds.
According to Flutterwave, some commercial banks allowed the money to be moved to other accounts, widespreading the money trail.
To investigate accounts holding the stolen funds across various financial institutions in Nigeria, S.A. Adedesin, Legal Officer, State CID, Panti, Yaba, Lagos, filed a suit in the Magistrate Court of Lagos (Yaba Magisterial District sitting at Yaba) to support Flutterwave’s claims.
The suit is between the Commissioner of Police and the following financial institutions:
- Access Bank
- Providus Bank
- Union Bank
- Keystone Bank
- PalmPay
- First City Monument Bank (FCMB)
- Kuda Bank
- Zenith Bank
- First Bank of Nigeria
- Guaranty Trust Bank (GTB)
- United Bank for Africa (UBA)
- Polaris Bank
- Wema Bank
- Union Bank
- Sterling Bank
- Ecobank
- Paycom
- Fidelity Bank
- Eyowo
- Stanbic IBTC Bank
- Opay
- VFD Microfinance Bank
- Carbon
- Moniepoint
- Al-Hayat Microfinance Bank
- PiggyVest
- Nomba (previously Kudi)
ALSO READ:
While there are no documents to confirm if the court has ruled in favour of Inspector Micheal’s motion, some people have confirmed that their accounts have been frozen in connection to the hack.
A Twitter user said, “I got a mail from my bank saying I’m a 4th beneficiary to this acclaimed fraud money. This was after over five days after a successful trade. My account is locked can’t access fund inside. Pls is this right? It’s unfair I have zero business with flutter wave or the hack.”
Per the motion filed by Adebesin, 107 accounts, including fifth beneficiaries of those accounts, are to be placed on lien/Post-No-Debit (PND).
With the stolen funds distributed across several accounts, which, according to tweets, may or may not have anything to do with the hack, it is not clear at this time who hacked Flutterwave.
Questions about how hackers got past Flutterwave’s security and what this means for the unicorn’s customers remain unanswered.
Funny enough, Flutterwave has denied the hack through a statement. it said, “we identified an unusual trend of transactions on some users’ profiles. Our team immediately launched a review (inline with our standard operating procedure), which revealed that some users who had not activated some of our recommended security settings might have been susceptible.”
The statement added that Flutterwave was able to address the issue before any harm was done to its users.
However, some Twitter users claim thier accounts were locked as a result of the hack on Flutterwave.
The company said, "We want to reassure you that Flutterwave
has not been hacked. As a financial institution, we monitor transactions through our transaction monitoring systems and 24 hour fraud desk and review any suspicious activity. We collaborate with other financial institutions and law enforcement agencies to keep our ecosystem safe and secure"
Join our Telegram Channel to get faster updates
