PalmPay has introduced NightGuard, a security feature within its upgraded Security Centre that gives customers an additional layer of verification for transfers made during hours they choose.
Users can activate a protection window, including the option of 11 p.m. to 7 a.m., during which transfers require additional verification before they can be completed. The feature is designed around a simple risk scenario: a compromised or lost phone can become more dangerous at night, when users may be less likely to immediately notice unauthorised activity.
Femi Hanson, Head of Marketing at PalmPay Nigeria, said the feature addresses situations in which a compromised or lost device could create additional risks during the night.
NightGuard forms part of PalmPay’s broader “PalmPay Dey For You” security campaign, which combines fraud awareness with user education.
The timing is significant. Nigeria’s digital financial ecosystem is operating in an increasingly complex fraud environment, with consumers facing scams across payments, identity verification and digital platforms. The Global Anti-Scam Alliance’s State of Scams in Nigeria 2026 report cited in the source material says 84% of Nigerian adults encountered a scam during the previous year, while 22% experienced financial or data loss.
At the same time, fraud techniques are becoming more sophisticated. The increasing use of AI-generated identities and deepfakes is making traditional verification systems more difficult to rely on in isolation. This is pushing financial institutions towards a broader approach in which security is built into the customer experience rather than left entirely to back-end fraud monitoring.
The CBN has been moving towards stronger security controls for instant payments, including requirements around transaction monitoring, device binding and additional authentication. Its framework also introduces mechanisms through which customers can exercise greater control over transaction limits and payment security.
The Regulatory Context: CBN Is Tightening the Rules
PalmPay's NightGuard launch coincides with a significant regulatory shift. The CBN has introduced new instant payment security requirements that reshape how financial institutions handle user security .
Key requirements include:
Voluntary opt-in/opt-out for instant payments
Voluntary transaction limits subject to MFA
Enterprise fraud monitoring for both inflows and outflows
Mandatory device binding for mobile financial services apps
A 24-hour cooling-off period with a ₦20,000 transaction limit for new accounts or new devices
The CBN also mandated a Cybersecurity Self-Assessment Tool (CSAT) for banks and fintechs, requiring institutions to evaluate governance, risk management, third-party exposure, and incident response capabilities
Against that backdrop, NightGuard is more than another security setting inside a fintech app. It reflects a wider movement towards user-controlled financial security.
The approach is relatively straightforward: instead of applying additional friction to every transaction, PalmPay allows customers to establish a period when stronger verification is required. That gives users an additional control while allowing normal transactions outside the protection window to remain relatively frictionless.
This is particularly relevant as fintech competition moves beyond payments and into savings, credit and other financial services. The more products customers hold on a platform, the more important trust becomes.
PalmPay, which says it has more than 40 million users, has increasingly positioned itself as a broader financial-services platform. In that environment, security becomes part of the product proposition rather than simply an operational requirement.
For years, much of fintech security happened behind the scenes through transaction monitoring, authentication systems and internal fraud controls. Features such as NightGuard put part of that security architecture directly in the customer's hands.
That does not eliminate fraud, and it cannot replace broader measures such as device security, identity verification, transaction monitoring and fraud detection. But it gives customers another layer of control over when and how their accounts are protected.
The education component is equally important. In a market where social engineering and increasingly sophisticated scams remain significant threats, technology alone cannot protect users who are unaware of how fraud occurs.
Customers are not only comparing transfer speeds, fees and available services. They are also evaluating how confidently they can use a platform to hold and move their money.
PalmPay’s NightGuard is therefore a relatively simple feature with a broader implication. It shows how Nigerian fintechs are beginning to treat security as something that customers should be able to see, understand and actively control.
The real measure of its impact will come from adoption and outcomes — whether customers activate the feature, whether it helps prevent or reduce unauthorised transactions, and whether similar user-controlled security tools become standard across the Nigerian fintech industry.