What the NCC has actually started
The Nigerian Communications Commission (NCC) says it has begun implementing an enhanced device verification framework. It checks each SIM-enabled device's IMEI number against that device model's Type Approval status. According to the NCC's press release, the platform is a Device Management System. It supports a Central Equipment Identity Register (CEIR) built on IMEIs. Edoyemi Ogoh, the NCC's Director of Technical Standards and Network Integrity, said all SIM-enabled devices brought into the country must be registered before sale. He said unregistered devices will not be permitted to operate on Nigerian networks.
The legal basis is not new. Section 132(2) of the Nigerian Communications Act 2003 requires licensed providers, manufacturers and suppliers to obtain Type Approval before communications equipment is sold or used in Nigeria. The NCC says the framework rests on its Type Approval Business Rules of August 2024. The first phase onboards devices already in stock and verifies future imports, working with the Nigeria Customs Service, manufacturers, importers and market associations.
The strongest case for the framework
The regulator's case deserves a fair statement. Counterfeit and cloned handsets are a real consumer problem. A phone that never passed Type Approval may not meet radio, safety or interoperability standards. A cloned IMEI can let a stolen device be reactivated or let several devices share one identity. An IMEI registry that can block devices reported stolen gives victims of theft a remedy that did not exist before. Honest importers are also undercut by grey-market sellers who skip approval, and verifying at the point of import is cheaper and less disruptive than chasing devices after sale.
The design also has features that limit harm. Nairametrics reported from the NCC briefing that devices already connected before go-live will not be retroactively disconnected. Techeconomy reports that about 231 million devices are already registered, and that subscribers do not need to register them again. Type Approval attaches to the device model, not to the person. The NCC's Device Checker Guide says it is usually obtained by the manufacturer or importer.
Where proportionality needs work
The framework is defensible, but three risks should be managed.
First, the privacy limit is a statement, not a safeguard. Ogoh said the platform supports only device identification and Type Approval compliance and cannot be used to monitor personal communications. That is the right boundary. A press-briefing assurance is not a binding constraint, though. An IMEI registry is technically a different thing from a subscriber database. It becomes sensitive once it is joined to SIM identity records. Nigeria already runs the NIN-SIM identity regime, and the NCC plans a TIRMS number-risk portal. Each tool is narrow on its own. The risk lies in linking them: a register that records which device was used with which SIM, which is tied to which National Identification Number. The NCC should publish a data-retention rule. It should also state which agencies can query the register and whether any court order is needed. Finally, it should say expressly that the register will not be joined to the NIN-SIM database for anything beyond fraud and theft.
Second, compliance costs fall on the least able to bear them. The framework covers more than flagship phones. Techeconomy lists smartphones, feature phones, cellular tablets, modems, SIM-enabled laptops and POS terminals. Large importers can absorb a verification step. Small phone traders in open markets can lose stock overnight if a model's status is unclear or a batch is rejected. The Device Checker Guide notes that dual-SIM devices usually carry several IMEIs and all must be submitted. It also says rejected IMEIs can be resubmitted after correction. That is sensible. But a legitimate trader who bought stock in good faith needs a clear, fast route to onboard it. Otherwise a quality tool becomes a tax on the informal sector.
Third, a blocklist needs due process. Blocking a device is easy to do and hard to undo. If a stolen-phone report is false, or an IMEI is wrongly flagged as non-compliant, the owner loses a phone and perhaps a livelihood. The NCC directs complaints to its toll-free 315 line. A published appeals timeline would be a better safeguard, with a stated service level for unblocking and a duty to give reasons.
A test for the next phase
The pro-innovation reading of this policy is a conditional one. Enforcing a standard that has been law since 2003 is legitimate. A transparent device register can cut theft and counterfeit imports without requiring more personal data. Consumers can already check a device by dialling *315# or using the NCC's online checker, and a public verification tool is the right model. That is a good example of regulation working through information rather than prohibition.
Success should be judged on outcomes, not on the volume of registrations. Useful measures would be the share of imported devices that pass first time, the average time to resolve a wrongly flagged IMEI, and the number of stolen devices recovered or blocked. The NCC should also report any request to the register from a third party. If these figures are published, the claim that the system is "not designed for surveillance" can be tested rather than taken on trust.
The NCC has stated the right limits. The task now is to put them in a regulation or guideline that binds the NCC and any other agency, before the device register, the SIM identity register and the number-risk portal begin to operate as one system.