NIN and BVN checks in Nigeria: what each one proves

A NIN check confirms that a national identity number was issued and recorded by the National Identity Management Commission (NIMC). A BVN check confirms that a person was enrolled in the Nigerian banking system's biometric identifier. A vNIN is a 16-character token that stands in for a NIN, so the NIN itself does not have to be handed over.

All three prove that a record exists and tell you what it holds. None of them, on its own, proves the person typing the number is the person on the record. Which one to use depends on who your customers are and what your licence asks for; how much to trust the result depends on whether you matched a live face against the record's photograph.

What is a BVN, and what does it prove?

The Bank Verification Number was launched by the Central Bank of Nigeria with the Bankers' Committee on 14 February 2014, as a "centralized biometric identification system for the banking industry", according to the CBN's BVN page (opens in a new tab). The CBN describes it as a number that lets a bank customer "have a single identity in the banking system".

So a successful BVN check tells you three things: the number exists, it was enrolled through the banking system, and the record holds details you can compare with what the applicant gave you. BVN operations are governed by a CBN framework, most recently the Revised Regulatory Framework for BVN Operations and Watch-List (opens in a new tab) of 12 October 2021, which the CBN's circular index shows was followed by an addendum dated 13 March 2026.

What it does not tell you: that the applicant has a bank account today, or that they are the person enrolled. A BVN is typed into your app as eleven digits, and anyone who knows someone else's BVN and date of birth can type them.

What is a NIN, and how is a vNIN different?

The National Identification Number is Nigeria's national identity number, issued and managed by NIMC (opens in a new tab). A NIN check tells you the number exists in the national identity record and returns the details held against it, which you compare with the applicant's.

A NIN is not tied to banking, so it reaches people a BVN may not: someone who has never opened a bank account can still hold a NIN.

The virtual NIN (vNIN) is a 16-character token that represents a NIN. It is designed for privacy: the applicant can prove their national identity to your business without handing over the NIN itself. NIMC sets the rules for how a vNIN is generated and how long it remains usable. Those rules shape your user experience, because the applicant has to obtain the token before they can enter it, so confirm the current rules with NIMC before you design around it.

Which should you ask for?

There is no universal answer, because it depends on your customers and your regulator. A few patterns, all illustrative:

For banks and wallets, the CBN's tiering rules matter. The CBN's circular of 1 December 2023 (PSM/DIR/PUB/CIR/001/053 (opens in a new tab)) is described in the CBN's own index as covering the "Mandatory Use of Bank Verification Number (BVN) or National Identification Number (NIN)" for Tier 1 wallets, and the "Enrolment of New Customer Accounts/Wallets with Validated BVN/NIN". If you hold a CBN licence, read the circular and any later CBN guidance directly: the rules for each tier are what your auditor will test you against. Requirements differ by licence and change over time, and this article is general information, not legal advice.

Why does the selfie matter more than the number?

Because a number can be borrowed and a face cannot, at least not easily.

Consider an illustrative case. An applicant in Abuja enters an eleven-digit BVN and a date of birth. The record comes back, and the name on it matches the name they typed. Every data field agrees. The applicant is the enrolled customer's younger brother, who knows his brother's details.

Nothing in the number check can catch that. What catches it is comparing a live selfie, taken with a liveness challenge, against the photograph on the BVN or NIN record. In Myaza Trust Identity Verification, a NIN, vNIN or BVN verification needs no document scan, and the selfie is compared with the government record photo when one is returned. The result records which photo was used (facialMatchSource: gov_record), so you can tell later whether the match was against the record or something weaker.

Design rule: never treat a number-only check without a face match as identity verification. At most, it is a data check.

What happens when the names do not match?

This is the most common source of friction with Nigerian IDs, and it deserves a decision before launch.

Names are recorded differently across systems. An applicant might be "Chukwuemeka Ifeanyi Okafor" on their NIN, "Okafor Chukwuemeka I." on their BVN and "Emeka Okafor" in your sign-up form. Some differences are spelling, some are order, some are omitted middle names.

Choose one of three stances per workflow:

1. Enforce. A name or date-of-birth mismatch fails the verification (gov_data_mismatch). Strictest, and the most retakes.

2. Record and review. The comparison still runs and is stored, but the verification can pass, and a rule sends mismatches to a person. In Myaza Trust this is the record setting for names or date of birth, routed with verification.nameMatch and verification.dateOfBirthMatch, as described in the workflows documentation.

3. Record and rely on the face. Pass on the record and the face match, and use the name comparison only as a signal. Only sensible when face matching is on.

A number not in the record at all returns identity_not_found. Treat that differently from a mismatch: it is usually a typo, occasionally a fabricated number, and the applicant's next step is to check what they typed.

Can you verify NIN and BVN together?

Yes, and for higher-risk accounts it is often worth it. Two independent records agreeing on the same person, both bound to the same live face, is much harder to fake than either alone.

Myaza Trust's multi-ID runs verify two or three IDs in a single verification (for example NIN and BVN), with one selfie covering both and a pass policy you set: all must pass, at least two, or any one. It lands as one verification, so your downstream systems deal with one result. Test both in Sandbox first: the sandbox testing guide lists the test IDs for each scenario.

A checklist for Nigerian onboarding

• Pick the default ID for your customer base: NIN for reach, BVN for banked customers, vNIN where you want to avoid holding the NIN.

• Always pair a number check with a live selfie matched against the record photo.

• Decide how strictly to compare names and dates of birth, and write the rule down.

• For higher tiers or limits, ask for a second ID and require both to pass.

• Read the CBN circulars that apply to your licence, directly, and review them when the CBN publishes changes.