Lotus Bank Insider Fraud: ₦1.5B Cyber Heist Uncovered

Thenigerianvoice

Lotus Bank Insider Fraud: ₦1.5B Cyber Heist Uncovered

First seen 22 May 2026, 20:40 UTC • •61.5

Article Content

1 / 3

Browse articles

ThreatCluster •May 23, 2026 at 20:03 UTC

•Lotus Bank staff member Abdulkarim Arome Mohammed orchestrated a ₦1.5B fraud.
•Fraud involved manipulation of Mudarabah profit distributions into unauthorized accounts.
•The case is ongoing, with legal proceedings set to resume on June 16, 2026.

An internal review at Lotus Bank revealed a significant fraud scheme orchestrated by staff member Abdulkarim Arome Mohammed. He allegedly exploited his access to divert ₦1,552,130,998.85 in customer Mudarabah profits into unauthorized accounts. The fraud was detected during a comprehensive review from January 2023 to May 2024, which identified suspicious profit payments. The stolen funds were dispersed across 22 financial institutions and involved three individuals, including Mohammed's wife. The case is ongoing, with proceedings adjourned until June 16, 2026, as more defendants are added. The bank aims to recover the diverted funds through legal action. Damilola Kusimo from Lotus Bank's communications department did not respond to inquiries at the time of publication.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 121d ago How this analysis works

Timeline

2023-01-01

Internal review initiated

Lotus Bank began a comprehensive internal review to investigate profit payment irregularities.

Thenigerianvoice

2024-05-01

Fraud scheme detected

The bank discovered the fraudulent diversion of ₦1.5B during its internal review.

Thenigerianvoice

2026-02-01

Additional defendants added

Lotus Bank continued to add defendants to the case in an effort to recover the stolen funds.

Thenigerianvoice

2026-05-22

Current proceedings adjourned

The Federal High Court proceedings regarding the fraud case have been adjourned until June 16, 2026.

Thenigerianvoice

More articles in this cluster (2)

Following this threat?

Track Lotus Bank in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…