2027 Election Season Is Starting — So Are the OTP Scams

INEC just got new commissioner nominations, the 2027 race is already warming up timelines, and every statehouse debate — state police, party lists, campaign financing — means the same thing on the ground: election season is scam season.

Every cycle it happens. Voter-registration "portals", PVC "validation" links, party-membership "confirmation" texts, giveaway schemes in a candidate's name. Almost all of them want one of two things: your personal details, or the OTP they just triggered on your accounts.

How the verification-code scam actually works

The fraud is simpler than people think:

1. The scammer starts a real verification on a real service — using your number.
2. You get a genuine OTP text from a genuine service.
3. They call or text you — "INEC", "your bank", "party secretariat", "customer care" — and ask you to read back the code you "just received by mistake".
4. You read it out. They now own whatever account that code unlocked — WhatsApp, a wallet, your email.

The OTP is the keys. Reading it to anyone — anyone — hands them the door. No legitimate body will ever call and ask for it.

Election-season variants to watch

• "Your PVC needs revalidation" — links to a fake portal harvesting name, DOB, number.
• Party membership confirmations — mass signups to party registers that quietly harvest phone numbers for campaign databases (and worse).
• Giveaways and empowerment schemes — "you've been shortlisted, confirm with the code sent to you."
• INEC result-checking clones — fake portals that look identical to real ones.

The habits that keep you safe

• Never share an OTP. Not with INEC, not with a bank, not with "support". The code is for your eyes, in your phone.
• Check where you're signing up. Real portals are on official domains — inec.gov.ng, not inec-registration-online.com.
• Your number is the vector. Every place your real number lives — a shady signup form, a leaked database — is a place scammers can find it. Which is the argument for keeping it scarce.

Where a temporary number helps

When a legitimate service wants phone verification — a forum, a news app, a political community platform, a poll app — you don't owe it your real line. A temporary verification number receives the OTP, verifies the account, and expires — leaving nothing for the next data leak to connect to you.

It's the same logic as the scams themselves, inverted: the number is the attack surface, so keep yours small. More on that mindset in why your real number shouldn't be public.

The 30-second rule

Election season will run for two more years — the scams will run longer. Whenever a code arrives unexpectedly, run the checklist: Did I just request this? Is anyone asking me for it? If the second answer is yes, the conversation is over. No exceptions for uniforms, titles, or urgency — urgency is the tool.

Stay sharp, verify what's real, and keep your number off strangers' lists.