From October, the hidden serial number inside your phone goes into a federal database. Here’s what that means for you.
Nigeria has roughly 320 million connected mobile lines, with about 195 million of them active as of mid-2026. That makes the country one of the biggest phone markets on earth. Now the Nigerian Communications Commission (NCC) is switching on a system that will log every one of those devices by its IMEI, the 15-digit serial number built into every phone.
The government says it’s about stopping theft and fake phones. Privacy advocates say it goes further than that. We went through the regulations, Kenya’s court ruling, Ghana’s rollout, Nigeria’s data protection law and what phone traders are saying, so you don’t have to.
What is the Device Management System?
At the centre of all this is the NCC’s Device Management System (DMS). It’s a platform that checks whether phones imported, sold and used in Nigeria meet official standards, using each device’s IMEI.
It feeds into a Central Equipment Identity Register, a master list of IMEIs that network operators can check against. The rules behind it, the NCC’s Type Approval Business Rules, were issued in August 2024.
The first phase covers phones already in stock with manufacturers, importers, dealers and vendors, plus every phone imported from now on. Businesses were meant to register their existing stock by 7 September, but after complaints about the timeline and the process, the NCC pushed the deadline to 6 October.
Once the system is fully enforced, the NCC says unregistered devices won’t be allowed on Nigerian networks. That means no calls, no texts and no data.
The case for it
The NCC says the system will block stolen and cloned phones instantly across every network, keep substandard imports out, and put manufacturers, importers and dealers under one set of rules.
Nobody agrees on how much of Nigeria’s phone market is fake or substandard. The NCC has cited figures as low as 10 to 20% in the past, while some in the industry now put it closer to 40%. Either way, officials argue a single national registry does what scattered, network-by-network blacklists never could, and gives police a faster way to recover stolen phones.
The money question
This is where it gets tense. The NCC has floated validation fees of roughly ₦670 per IMEI for low-cost phones and around ₦3,700 for high-end ones.
The Association of Mobile Phones and Allied Products Traders of Nigeria (AMPAT) says it supports the system in principle but rejects the fees. Its president, Musa Mamza, argues that manufacturers won’t absorb the cost, so it will fall on dealers and then on buyers. That matters in a country where most people still don’t own a smartphone, and where even a small price rise can put a basic phone out of reach. AMPAT has asked Communications Minister Bosun Tijani to review the plan.
Can the system even cope?
Phone technicians are worried too. Stakeholders reportedly saw the portal glitch during an NCC demonstration ahead of the deadline, which raised doubts about whether it can handle millions of uploads.
There’s also no clear way to appeal yet. If a phone’s IMEI is damaged during a legitimate repair and the phone gets wrongly flagged, there’s no set process for fixing it. The technicians’ association, AMCODET, and others want a phased rollout and a public awareness campaign before enforcement begins.
Where privacy comes in
An IMEI on its own only identifies a piece of hardware. But every SIM in Nigeria is already linked to a National Identification Number (NIN). Link the two, and a phone can be tied to a named person.
Deolu Ogunbanjo, president of the National Association of Telecoms Subscribers (NATCOMS), has warned that millions of subscribers don’t understand what’s being collected, and that sudden disconnections without proper public education could cause confusion and backlash. Digital rights advocates add that any system collecting device data at this scale raises surveillance questions, whatever the intention behind it.
What the NCC says
The NCC says the system only checks whether phones meet official standards. It insists it can’t track your calls, read your messages or see anything on your phone, and that the platform exists to verify hardware, not to monitor people.
That’s a real distinction on paper. But privacy advocates point out that even “just metadata” (who is connecting, from where, and on what device) is sensitive at national scale. They want guarantees written into law that the data will never be used for anything else, not just promises.
What the law says
The Nigeria Data Protection Act 2023 does put limits on the NCC. Under its data minimisation principle, the Commission can only collect what it strictly needs, which means IMEIs, not your browsing history or app data. Data collected to stop phone theft can’t legally be repurposed for something like political tracking without new legal approval. Because it handles data at national scale, the NCC counts as a “data controller of major importance”. That comes with stricter duties: a dedicated Data Protection Officer, regular privacy audits, and 72 hours to report any breach to the Nigeria Data Protection Commission (NDPC).
What happens if it goes wrong
Under the Act, a major data controller like the NCC can be fined ₦10 million or 2% of its annual budget, whichever is higher. The NDPC has already collected about ₦7.2 billion in penalties since it stepped up enforcement, including its largest fine yet, ₦555.8 million against Fidelity Bank in 2024.
People affected can also sue for compensation, and officials found guilty of wilful or negligent mishandling of data can face up to a year in prison. The law has real teeth. The question is whether it will be used against a government agency the way it has been used against banks.
Kenya tried this, and its court shut it down
Nigeria isn’t the first African country to try this. In 2024, Kenya’s Communications Authority and Revenue Authority ordered a mandatory IMEI registry. The civil society group Katiba Institute took them to court, and in July 2025, the High Court struck the whole directive down. Justice Chacha Mwita ruled that the notices had no basis in law and violated constitutional protections on privacy. He found that IMEI numbers count as personal data, and that a programme this invasive needed an act of parliament, not a regulator’s notice.
Ghana has taken a softer route.
Its National Communications Authority is rolling out its own register in 2026, linked to the Ghana Card, with the focus on stopping mobile money fraud and a promise to build privacy protections and user consent in from the start. So far, it hasn’t faced the kind of legal challenge Kenya did, which suggests that how a government builds trust around a system like this matters as much as the technology.
Haven’t we been here before?
If this sounds familiar, it should. NIN-SIM linkage, first announced in 2020, had its deadline pushed back at least nine times amid system overload, confusion and blocked lines. The DMS is already following the same pattern: one deadline moved, more time requested, and real doubts about whether the system can handle heavy daily use.
What should you do?
If you own a phone:
• Don’t panic. The 6 October deadline is for businesses, not for phones already in use.
• Save your IMEI. Dial *#06# and store the number somewhere safe.
• Keep your receipts for purchases and repairs.
• Buy carefully. Stick to licensed dealers, and check that the IMEI on the box matches the phone.
• If your phone is stolen, use your saved IMEI to have it blocked through the NCC’s official channels.
• Watch out for scams. You don’t need to pay anyone to register a phone you already own.
If you sell or import phones:
• Register your current stock on the DMS portal before 6 October to avoid validation fees.
• For new imports: get NCC type approval, upload invoices, pay validation fees and generate QR codes.
• Don’t count on another extension. Confirm every step directly with the NCC.
