How to Update the Phone Number on Your BVN (2026)

The most important thing to know before you read further: under the CBN circular dated 12 March 2026, effective 1 May 2026, every BVN customer has exactly one phone-number change available across their entire banking life. Spend it once and the field locks. There is no monthly quota, no annual reset, no per-bank counter. One change, lifetime.

The cap landed at short notice. Customers who in March 2026 still treated the BVN-linked phone number as something casually updatable found themselves with weeks to decide what number they actually wanted on the file for the next several decades. Data-privacy lawyers and civil society organisations have challenged the rule in court on Nigeria Data Protection Act and constitutional-privacy grounds. As at May 2026 the rule remains in force; the challenges have not produced a stay.

What this means in practical terms: the procedure for changing the BVN phone number is the lightest of the three BVN modifications, but the decision to use it is the heaviest in the cluster. The bank's KYC desk can run the submission in minutes. The customer's calculus about whether to run it at all is where this article spends most of its words.

A regulatory rule that reduces customer flexibility almost always exists to close an attack surface. The lifetime cap on BVN phone-number changes is no different. The CBN's stated rationale is anti-fraud, and the specific fraud pattern it targets is SIM-swap-led account takeover.

The attack chain reads like this when run against a Nigerian bank customer: the attacker collects the victim's BVN, name and date of birth from phishing, social media, a leaked database, or insider channels. The attacker convinces a telco to issue a SIM swap on the victim's number using social engineering or insider collusion. With the SIM swap in place, the bank OTP routed to that number now arrives on the attacker's handset. The attacker initiates transfers from the victim's bank account; the OTP confirms them.

The BVN phone-number change made the chain more attractive. An attacker who could not get a SIM swap from the telco could try to change the BVN-linked phone number at the bank instead. The lifetime cap closes that lateral move. The attacker now cannot route through the BVN if the SIM-swap route fails; the customer's one lifetime change is also the attacker's one lifetime change.

The reframing the cap forces on customers is uncomfortable but defensible. A phone number that is easily-changeable is a phone number that is easily-stolen. Treating the BVN-linked phone number as something semi-permanent matches what the credential actually is — a stable identifier the banking system uses to reach a specific human across the rest of that human's banking life.

A short list of cases where spending the lifetime change is the right call:

• The SIM is genuinely, permanently lost. Stolen and the handset is gone; left in a taxi and the SIM was never recovered; the network has reclaimed the line and reassigned the number to a new subscriber. The original number is not coming back; the new number is the only forward route.
• The original line has been ported to a new network that you intend to stay on, and the BVN linkage did not follow. Porting moves the number but not always the BVN-side linkage; where the linkage has not followed, the BVN-side phone-number change is what realigns it.
• The original number was a work number you no longer have access to. You left a job; the line was issued by your former employer; the line is no longer in your control. The replacement personal number is the long-term number you want on the BVN.
• The original number is on a network that has shut down or merged in a way that lost continuity. Less common in Nigeria post-2025, but where it happens the lifetime change is the realignment route.

In each of these cases, the test is whether the original number is genuinely irrecoverable and the new number is genuinely long-term. The change is one-shot; both halves of that calculus matter.

A practical step before walking into the bank: confirm the new line is registered against your NIN. The NIN-SIM linkage is what makes the new number defensible at the BVN desk and at NIBSS. A line registered against someone else's NIN, or a line on which the NIN linkage was never completed during the NCC's enforcement window, will fail the bank's cross-reference check. Where the new line's NIN linkage is uncertain, run the universal status check at *996# from the new SIM before you walk in.

The harder list — the cases where customers feel pressure to spend the change but should not.

• A temporary SIM-swap scare that resolves with a fresh SIM on the same number. Your handset was lost or stolen and you panic. The instinctive move is to change everything; the actual move is to restore the SIM on the same number through the telco's SIM-replacement route. MTN's SIM Swap, Airtel's and 9mobile/T2's Welcome Back, Glo's SIM replacement — each restores the original number to a new physical SIM, which leaves the BVN linkage intact. The lifetime change is for cases where the number itself is gone, not where the SIM is gone.
• The line is temporarily off because of an unpaid bill or an account hold. Pay the bill, restore the line, the BVN linkage was never affected.
• The line is reachable but you have stopped using it because you prefer a new number. Preference is not a reason to spend the lifetime change. Where the original number still works and still receives OTPs, it is doing its job for the BVN.
• A friend-of-a-friend's 'advice' that changing the BVN phone number will 'reset' a flagged BVN or 'remove' a transaction restriction. It will not. A flagged BVN is in the bank's review queue for a separate reason; the phone-number change does not lift the flag. See BVN blocked account for the actual restoration route.
• An 'agent' offering to fast-track a BVN phone-number change for a fee. No legitimate fast-track exists. The bank counter is the channel and the bank does not charge for the change. Any third party charging a fee is selling something the bank performs free; some are also running a fraud setup against the customer's credentials.

The reasoning that ties these cases together is the irreversibility. A misallocated lifetime change cannot be unwound and the original number cannot be reinstated. Every uncertain case should default to waiting until the case is no longer uncertain.

Once the decision is firm, the bank-side process is the lightest of the three BVN modifications.

1. 1
   Walk into a branch where you hold an accountAny branch of any bank holding a current account against your BVN. Bring a valid government photo ID, the new SIM in a handset under your control, and a police report where the original SIM was stolen.
2. 2
   Ask for the BVN desk or customer-service deskTell the officer the modification is a BVN phone-number change and that you are aware it is the lifetime change. The desk will confirm verbally that you understand the cap before proceeding; this is a recent CBN-mandated counter check.
3. 3
   Identity verification at the counterThe officer matches your ID to the bank's record, checks the signature, and may ask one or two KYC questions: mother's maiden name, date of account opening, recent transaction amount. Standard identity check.
4. 4
   Bank fills the BVN Linking and Correction Form for the phone fieldThe form lists the old BVN-linked number, the new number being submitted, the customer's affirmation that the new line is under their control, and the supporting documents attached. The customer signs; the bank's KYC officer counter-signs.
5. 5
   OTP confirmation to the new numberNIBSS sends an OTP to the new number to confirm the customer controls it. The OTP arrives on the new SIM in the customer's hand at the counter; the customer reads it to the officer or keys it on a counter device. This step is the irreversibility gate — once confirmed, the change is registered.
6. 6
   Bank submits to NIBSS and the linkage updatesSame-day at the counter. The new number replaces the old number on the BVN record. The bank's app reflects the change within a working day; other banks where you hold accounts follow on their own cache cycles over 24 to 72 hours.

A clean visit takes under an hour. The wait is the queue plus the OTP confirmation; the submission itself is electronic and fast. There is no separate fee at the counter.

A practical caveat that has surfaced since May 2026: some bank branches require the customer to bring the new SIM in a separate, working handset rather than reading the OTP off the same phone the customer arrived with. This is to confirm physical control of the new line. Where the bank's branch policy asks for this, comply; the alternative is rescheduling the visit for when both handsets are available.

A subset of customers will arrive at this article having already used the one available change. A SIM was stolen in 2026, the change was spent, and now in some later year the new number is also compromised or out of the customer's control. What recourse remains?

Realistically, less than the customer would prefer. The CBN circular does provide for exceptional approval beyond the one-time change, but the published exception procedure is not yet in routine circulation as at May 2026. The route, when it operates, runs through the bank's fraud-investigation track and carries an evidentiary burden — police reports, telco statements, bank records of the compromise, supporting documentation of why the previous change was made.

A customer in this position should:

• Contact the bank's relationship manager or fraud-investigation desk directly. Not the routine BVN desk; the desk-level officer does not have authority to run a second change. The escalation runs through the bank's internal compliance team.
• Bring the full evidentiary stack. The compromise of the second number, the steps taken to recover it, the police report, the telco-side correspondence. The CBN's exceptional-approval process is documentary-heavy.
• Expect a long review. Weeks to months, not days.
• Consider whether the workaround is at the bank's end rather than at the BVN end. Where the issue is OTP delivery, the bank may have alternative authentication routes (the bank's app token, in-app biometric authentication, hardware tokens for high-value accounts) that work around a compromised number without requiring a second BVN-side change.

The honest framing is that the lifetime cap is binding for almost all customers in almost all cases. Treat it as a structural feature of the post-May-2026 banking system rather than as a soft suggestion that has a back door.

The cluster sees recurring customer confusion between the BVN side and the NIN side because both records hold a phone number and both have an enforcement layer. They are not the same.

The NIN-linked phone number is held at NIMC. NIMC allows up to three changes through the NIMC self-service modification portal at a fee of ₦2,000 per change. The change is supported by a police report where the SIM was lost or stolen; the portal sends an OTP to the new number to confirm control. Beyond the third change, the modification has to be done at a NIMC enrolment centre rather than self-service.

The BVN-linked phone number is held at NIBSS under CBN regulation. NIBSS allows one change across the customer's banking life as at 1 May 2026, through the bank counter, at no bank-side fee, supported by valid ID and proof of control over the new number.

Different agencies, different rules. A reader updating both should run them as two separate operations, on two separate channels, with two separate decision frameworks. The same new phone number can land on both records, but the modifications happen independently and the constraints on each side are independent.

The NIN-side parallel is at how to update phone number on NIN. The NIN allows more flexibility; the BVN does not. Do not assume changing one auto-updates the other.

A common case: the SIM that was registered against the BVN at enrolment is gone — stolen handset, lost line, no SIM swap available. The customer needs both the SIM and the BVN sorted, and the order matters strategically.

Two paths exist depending on whether the original number itself is recoverable.

• Path A. The original number is still yours, just on a lost SIM. Restore the SIM through the telco's SIM-replacement route — MTN's SIM Swap, Airtel's or 9mobile/T2's Welcome Back, Glo's SIM replacement. The replacement SIM inherits the original number; the BVN-linked phone number does not change; no lifetime BVN change is spent. This is the recommended path whenever the original number is recoverable.
• Path B. The original number is permanently gone. The line has been reclaimed by the network and reassigned, or the original SIM is irretrievable and the number cannot be re-issued. Now the BVN-side change is the only route and the lifetime change is spent. Recover a new SIM under your name and NIN at the telco first; bring the new number to the bank for the BVN modification.

In both paths the SIM step comes before the BVN step. A customer who walks into the bank before the SIM situation is resolved cannot complete the OTP confirmation. The bank can run the modification submission, but the OTP-to-new-number step needs a working new line in the customer's hand.

The deeper coverage of the BVN side when the original SIM is also gone sits in our how to retrieve a lost BVN article, which walks the in-branch retrieval that does not require the SIM. That article is the right read where the customer's primary need is to get the BVN number back, not to change the BVN-linked phone.

A reader spending the lifetime change is reaching across the three institutions in the BVN architecture, even though the only counter the reader stands at is the bank's.

The reader-facing implication for this specific modification:

• The bank counter is the channel. The bank's KYC desk runs the submission, the OTP confirmation, and the customer-side documentation. The customer never deals with NIBSS or CBN directly during the operation.
• NIBSS owns the BVN-to-phone bond. The new number replaces the old one in NIBSS's record once the OTP confirms control. The bank's downstream cache and other banks' caches then refresh from the NIBSS master.
• CBN's framework sets the rule. The lifetime cap, the OTP confirmation requirement, the suspicious-activity flag that can pause a modification, the access restrictions under the May 2026 amendments — all of these come from the CBN circular rather than from individual bank policy. Different banks may differ slightly on counter routine, but the channel shape is regulated.

A customer who finds that one bank refuses the modification on grounds another bank would accept is encountering a bank-specific interpretation rather than a CBN-mandated refusal. The published rule is the same across all CBN-licensed institutions; counter discretion varies. Where one bank's branch declines and the modification is otherwise straightforward, another branch of the same bank or another bank where the customer holds an account is the next stop.

For the wider security context around BVN as a credential — what makes the lifetime cap defensible from a fraud-control perspective — see is BVN safe to share, the cluster's architecture-reference article. That article walks the OPay 5,000-account SIM-swap compromise from October 2025 and the NIBSS 2023 Annual Fraud Landscape's ₦17.67 billion figure that together explain why the CBN landed on the lifetime cap rather than a softer constraint.