NIGERIA - FAKE GOVERNMENT CASH GIFT

The "FG ₦50,000 cash transfer, no BVN required" link on WhatsApp is a scam. We opened it to show you how it works.

The real ₦50,000 relief programme, NERSI, has no link, no form and no application. The page going round WhatsApp borrows its name, asks for your bank details, then keeps you tapping "share" until 16 taps later it sends you to an advert.

SB

SafeBrowz Threat Research Security Research · 7 November 2026 · 8 min read

The message, and the page behind it

The forward usually arrives in a family or church group, written as if a friend sent it:

"*FG N50,000 Naira Cash Transfer Ongoning, No BVN Required* The Federal Government Of Nigeria through The Minister of Humanitarian Affairs and Poverty Reduction, Dr Bernard Doro is Giving out N50,000 Cash Transfer to All Nigerians, i just got mine. *Get Yours Here Now* 👇 [link] *SHARE WITH EVERYONE*"

We did not copy that from a screenshot. It is the text the scam page itself puts into your WhatsApp when you press its share button, typos included ("Ongoning"), with only the link replaced by [link] here. So every person who falls for it sends the next copy out word for word.

The link in it is billnova[.]online/fg50k. That address is a short link on a domain registered in February 2026, and it simply forwards you to a free Blogger site, fg-50k-online[.]blogspot[.]com. Nigerian Democratic Report's fact-checkers rated the link false on 6 November and found the site had been set up on 7 October. On 7 November we downloaded the page and read its code line by line. This is what it does.

What happens when you tap it, step by step

1. A page that looks official. The headline reads "FG Instant N50,000 CASH TRANSFERS FOR ALL NIGERIANS" with "NO BVN REQUIRED" and "POWERED by Federal Government of Nigerian". Underneath, it pastes a real-sounding paragraph about NERSI, so the page borrows the credibility of a programme that exists. A line says "Till Today 4548 Nigerians have received their N50,000", and the number climbs every second so it looks live. It is not counting anyone. The code starts it at 4548 and adds a random amount each second.
2. It asks for your bank name and account number. Then a "Please wait" loader counts up, and it asks for your name.
3. A fake check. "Checking your information..." runs a progress bar that is coded to pause for a moment around the halfway mark, so it looks like something is really being looked up. Nothing is.
4. "Congratulations", with a catch. It greets you by the name you typed and says your ₦50,000 "is pending because you have not completed the Human verification process". To finish, "Share it with 5 groups or 15 friends on WhatsApp".
5. The share loop. Every tap of the share button opens WhatsApp with the message above. A green bar creeps up: 50% on the first tap, then uneven smaller jumps, ending at one or two percent a tap. Three times, at fixed points, it shows an error: "You may have shared it with the same friend or group more than once, please re-share". Those errors are written into the code. They appear no matter who you sent it to. It never reaches 100%. It stops at 98%, and only the 16th tap opens the next screen.
6. The "reward". After all that, you get buttons such as "ACTIVATE ACCOUNT", "CLAIM 10K HERE" and "CONTINUE". They lead to an advertising redirect link that passes you to whichever advert is next in line. No money, no form, no NERSI.
7. The Back button is hijacked. As soon as the page loads it fills your browser history with ten extra entries, then adds another half a second later. Pressing Back does not take you out: it shows a pop-up, "Please Complete The Required Actions to Recieve Your Gift", and then sends you to the same advert link. The advert page then adds three more history entries of its own.

Below it all sit fake Facebook-style comments: "I just recieved my N50,000. Thank you FG", "Omo i had to share to my friends and family". One of them is about the 2027 election. None of them are real people. They are part of the page's own code, like the counter.

Who gains, if nobody gets paid

In the copy we read on 7 November, the page's own code does not send the bank details and name you type anywhere, and there is no payment form. But it also loads Meta's advertising pixel and a third-party visitor counter, and we cannot rule out that those pick up what is typed. What the page is built to collect is reach and traffic. Everyone who finishes the loop taps share 16 times, every forward brings new visitors, and every visitor ends on an advert.

Do not read that as "so it is harmless". You have still handed a stranger's page your bank details in a box, and the same short link can be pointed somewhere else overnight, with no change to the message already sitting in thousands of chats. A page that collects data today is one small edit away from one that sends it. That is why the safe answer to these links is not to open them at all.

A recycled kit: the Independence Day leftovers

Two details in the page code give away where it came from. The share progress is saved in your browser under the name independence66_share_progress, and the page's styling still refers to an image called 66independence.png that it no longer uses. Nigeria marked its 66th Independence anniversary on 1 October 2026. The same template was almost certainly used for a fake Independence Day giveaway first, and when the real NERSI programme was announced at the end of October, the operators swapped the headline and kept everything else.

We have seen this exact playbook before. The fake Airtel ₹2,000 Diwali gift that spread on WhatsApp in India in October used the same steps: a festival or national-day hook, a request for your details, a share counter that fails on purpose, and a Back button that will not let you leave. Only the flag, the currency and the code underneath change. Whenever a real scheme, a festival or a big match makes the news, expect a copy of this page with that name on it within days.

How the real ₦50,000 NERSI payment works

The Federal Ministry of Humanitarian Affairs and Poverty Reduction rolled NERSI out at the end of October 2026, as ThisDay reported. It is support for poor and vulnerable households, not money "for all Nigerians". The official page explains how it reaches people:

• You cannot apply. Beneficiaries are picked from the National Social Register and verified national identity records. "You cannot apply, and no one can add you to the list."
• You get an SMS from one of five providers. ALAT by Wema, MoMo PSB, NairaGram, OPay or Moniepoint, from the provider's official sender name. You reply YES, or dial the code it shows, to accept.
• No link, ever. The real SMS "never asks for money, your PIN, your OTP or for you to click a link."
• Forwarding does nothing. The official page answers this scam directly: "A WhatsApp message says to forward it to get ₦50,000. Chain messages are fake. Forwarding a message does not make anyone a beneficiary. Delete it."
• It is free. Nobody can charge you to "release" your money or to put you on the list.

Notice the irony in "No BVN required". The real programme never asks for your BVN either. The scam turned an ordinary safety rule into a selling point.

The 30-second check before you forward anything

• Is there a link? Real NERSI messages are SMS with a USSD code, not a link. A link to "claim" is the giveaway.
• Does it ask you to share? No real government payment depends on how many groups you forward a message to.
• Where does the link really go? A free blog, a short link or a domain with no gov.ng at the end is not a government site. Real federal pages end in .gov.ng, like fmhapr.gov.ng, and the ending must be at the very end of the name.
• Does it say "for all Nigerians", "instant" or "no BVN"? Real support is targeted, comes in phases and has rules. Urgency and "everyone qualifies" are the marks of a lure.
• Are you unsure? Call the NERSI help line on 0700-022-2222, or your provider's own number, before you do anything else.

Where a link check fits in a share-gate scam

This scam never needs to steal a password. It only needs you to open the page once, because the page does the rest: it shows you the official-looking headline, takes your details and starts the share loop. The one moment that can be stopped is the tap. SafeBrowz checks a link's real destination before the page loads, in the browser extension for Chrome, Firefox and Edge, and in the Android app when its link check is on, which matters here because most of these forwards are opened on a phone.

Both addresses in this campaign, the billnova[.]online short link and the fg-50k-online[.]blogspot[.]com page, are on our block list as of 7 November 2026, so they now come back as "danger" on every surface. For this campaign we blocked only that one Blogger address. Blogger itself is a legitimate Google service, and blogspot.com as a whole is not blocked.

Now the honest limit. Before we added them, our link check rated both only "caution", because a new Blogger blog and a fresh short link are suspicious but not proof of a scam on their own. The URL-shape rule we built for the Airtel gift kit does not match this one, because this copy lives on a free blog with an ordinary address. So a new copy on a fresh Blogger name may get a caution at best, or no warning at all, until it is reported. Our AI deep scan, one a day free on the web checker and unlimited in Premium, reads the page itself rather than just the address. A "cash gift" that can only be claimed by sharing is exactly the kind of page text it is there to read.

If you already opened it or shared it

• You typed your bank name, account number and name: together they cannot move money out on their own, but they make a follow-up scam sound real. Expect someone claiming to be from your bank, OPay, Moniepoint or "the NERSI office". Never give a PIN, OTP or BVN to anyone who calls you, do not repeat your account details to them, and call your bank back on the number in its app or on your card.
• Money you did not expect arrives, then someone asks for it back: do not send it back yourself, and never to a different account. Tell your bank and let it reverse a genuine mistake. "Wrong transfer, please refund" is a common follow-up trick.
• You shared it: send a short message to the same groups saying the link is fake, and point them to the official NERSI page. That stops the chain where it started.
• You were asked to pay a fee to "release" money: do not pay. NERSI is free. Report it to the provider named in the message, or to the NERSI help line.
• You lost money: call your bank immediately, then follow the steps in our guide to what to do after a scam.

The same promise of free money turns up in the SARS tax refund phishing scam in South Africa, the "free $750" Cash App offer and the America 250 gold coin gift. Our guide to fake giveaways covers the wider family.

Add to Chrome Add to Firefox Add to Edge Get it on Google Play