EXAMINATION: How Online Platform Slipcraft Helps Scammers Fake Transfers, Generate Fraudulent Receipts

Aliyu Balqees lost rely on digital payments on a Tuesday early morning in October 2025, a day the 34-year-old shoe trader states stays engraved in her memory. From her modest store in Ilorin’s Gegele Market, Kwara State, she enjoyed the normal rush of the early morning crowd. Like lots of traders, Balqees had actually adjusted to digital payments following Nigeria’s 2023 cashless policy.

“A consumer strolled in while I was organizing my products and requested corper-style Kito shoes,” Balqees remembered. “They cost 3,500 each, and he desired 3 sets, 2 size 43s for himself and a size 40 for his sweetheart.”

After short bargaining, they decided on 9,000. “He requested my bank information, and I offered him my GTBank account number,” she stated.

“Normally, GTBank notifies require time, so I normally ask clients to reveal me the transfer invoice,” she kept in mind.

The consumer provided an invoice verifying an effective 9,000 transfer. Pleased, Balqees turned over the jam-packed shoes and saw him disappear into the congested market. Hours passed, however the cash never ever showed up.

The loss destroyed her day, however it taught her a difficult lesson. “Now, if you do not have money, I will not offer to you,” she stated.

Her willpower shows a growing pattern. Throughout significant Nigerian markets, repeating digital payment scams and network failures are driving traders back to money, weakening the federal government’s push for a cashless economy.

“Cash deals stay the best,” stated Rahannah Musa, who offers * Dankali da Awara * (fried potatoes and tofu) in Sokoto State’s Wamako Local Government Area. “Customers frequently declare they sent out cash, however the transfer never ever shows.”

Musa embraced transfer payments in 2023, which at first enhanced her sales compared to cash-only suppliers. Network instability often required her to rely entirely on transfer invoices.

“That is where the issue lies,” Musa regreted. “When the network stops working and the cash isn’t credited, you have no option, the client is currently long gone.”

Throughout Nigeriapostponed or missing out on bank notices produce substantial friction for customers and entrepreneur alike. Many clients depend on SMS or e-mail informs to validate deals, however technical problems, network downtime, and systemic banking failures often stall or avoid these shipments. The resulting unpredictability frequently activates deal conflicts, double payments, and instant mistrust.

The crisis intensified in January 2025 when the Nigerian Communications Commission (NCC) licensed telecom operators to detach Unstructured Supplementary Service Data (USSD) gain access to for 9 banks over a 200 billion built up financial obligation. The suspension left countless clients not able to perform USSD banking or get deal notifies, intensifying the alert traffic jam.

According to a 2025 study performed by reporters, 71 percent of participants chosen money over digital payments. 19 percent usage digital payments periodically however still have issues, whereas 10 percent state they run totally cashless deals.

Of the 330 traders who tried the study, 52% reported coming down with phony deals a minimum of as soon as. 27% lost cash to deceitful digital deals, and 15% stopped accepting bank transfers due to numerous bad occurrences.

The Story Of Salamatu Who Loses 8,000 naira Daily to Fake Transfer

Salamatu Bala, another supplier in Sokoto, is amongst those who have actually succumbed to phony transfers. She feels she has no option however to continue accepting digital payments to remain in company.

The Kunu da Kosai (pap and fried bean cake) seller assessed how sly some clients can be.

“Sometimes, after an intense day, you examine your balance and recognize you are brief by 7,000 or 8,000,” Salamatu discussed.

“How much earnings do I even make from this service for 7,000 to simply disappear like that?” she asked.

She remembered a day a client left without spending for 1,100 worth of kunu.” I even assisted him by asking another consumer to move 500 to his account so he might send me the complete 1,600 through OPay,” she stated.” He declared his network was bad and assured to withdraw money close-by and return. I never ever saw him once again.”

She included that such occurrences, intensified by her problem browsing digital banking apps, cause regular monetary losses. “That is why I constantly choose clients who pay with money,” she stated.

The Cost of Digitalisation

Nigeria’s digital payment environment has actually broadened drastically given that the intro of the 2023 cashless policy. Information from the Nigeria Inter-Bank Settlement System (NIBSS) reveals that instantaneous digital payments rose to 1.07 quadrillion in 2024, up from 600.36 trillion in 2023. Throughout the exact same duration, Nigerians performed 1.38 billion Point-of-Sale (POS) deals valued at 18.32 trillion. While these digital developments intend to enhance deal effectiveness, lower cash-handling dangers, and deepen monetary addition, a main objective laid out by the Central Bank of Nigeria (CBN)– they have actually likewise developed brand-new vulnerabilities.

Behind these record figures lies a darker truth: a growing shadow economy where fraudsters methodically target small traders like Balqees, Rahannah, and Salamatu.

According to the CBN’s Nigeria Payments System Vision 2028 report, banks and their consumers lost 134.48 billion to monetary scams in between 2020 and 2025. Overall attempted scams throughout that duration reached 187.79 billion, highlighting the huge scale of cybercrime tracking the country’s digital payment growth.

These losses crossed several payment channels, consisting of ATMs, mobile and electronic banking, POS terminals, e-commerce platforms, cheques, and over the counter transfers.

The CBN acknowledged that while fast digital adoption and fintech development have structured commerce, they have actually likewise widened the attack surface area for scammers. Regulators and monetary organizations have actually reinforced joint oversight, the main bank alerted that progressing scams plans continue to threaten the stability of the nation’s digital monetary environment.

Nigeria’s Fake Transfer Economy

In June 2025, popular TikToker, ROZAY AI TOOLS & & TECHpresented his over 4 hundred thousand fans to ‘slipcraft.net. A site where fraudsters transfer and create invoices for non-existent funds from fintech apps in Nigeria, consisting of PalmPay, OPay, Kuda among others.

“This site will blow your mind. I simply found a site that does phony transfers. Stay calm, let me reveal you how it works so you will not fall victim.”

Rozay, in the video, took his fans step by action through establishing and utilizing an account. Rozay constantly warned his fans not to utilize the tool mistakenly and even cautioned that the video was for “academic functions” just. Legal specialists like Abdulwasiu Olokooba, a Kwara-based legal professional and digital rights supporter, would disagree.

“A disclaimer is not a legal guard from liability. Nigerian courts analyze compound, intent, and impact instead of type. If the material offers useful tutorials on browsing a tool whose main recognized usage is scams (producing fictitious balances, producing invoices that can be utilized to trick), the developer dangers liability for helping and abetting, conspiracy, or helping with computer-related scams under the Cybercrimes Act,” Abdulwasiu informed our press reporter.

He even more stated that disclaimers such as “apparently” or “academic functions just” do not instantly negate guilty mind or public-policy factors to consider.

“Where the surrounding context (blood circulation amongst recognized scams neighborhoods, sales of gain access to points, and showed usage in genuine rip-offs) reveals the product is planned or most likely to allow criminal offense, criminal duty connects. Civil or regulative effects for platforms and developers can likewise occur. Real academic material on cybersecurity, like how banks find phony invoices, is secured expression; educational product that gears up fraudsters is not,” he clarified.

Rozay is not the only user guilty of this. Comparable messages were passed in other videos, as seen here and here

Abdulwasiu included that the reality that the videos stay available and distributing is a breach of TikTok’s Community Guidelines, which clearly restrict material that promotes or helps with frauds, scams, or misleading plans. The platform mentions it utilizes proactive innovation, human customers, and user reports, and declares high elimination rates (frequently before user reports) for fraud-related product.

“When tutorial-style material tagged “instructional” however reaches audiences and makes it possible for real-world scams, it shows spaces in detection, especially of coded or disclaimer-shielded educational product. Volume, algorithmic amplification, and the difficulty of differentiating authentic education from assistance add to enforcement deficiencies. Platforms are not anticipated to be ideal, however relentless public schedule of plainly facilitative material suggests a failure to fulfill their own specified requirements.”

How Does Slip Craft Work?

After registering the site’s inner control panel exposed a more troubling reality: beyond Fintech’s phony transfer and invoice generation, the site can send out flash e-mails for cryptocurrency wallets, consisting of Binance, Bybit, Coinbase, PayPal, and more. It was at that point that the expression from the homepage made good sense. The tool was suggested for deceptive activities. This examination is a query into the phony transfer economy.

Records acquired from WHOISa public database of domain registration details, reveal that the domain slipcraft.net is signed up with Cloudflare, Inc, a Canada-based registrar headquartered in British Columbia. A determined relocation, as fraudsters typically choose jurisdictions far from their targets so regarding prevent takedowns.

The records expose that the domain was just signed up on May 13, 2025, simply a month before Rozay’s video. It was upgraded on April 23, 2026 and set to end in May 2027.

ICANN LOOKUPanother open source tool for site analysis, supported this press reporter’s findings on WHOIS domain by calling Cloudflare Inc as the registrar. The wrongdoers names and contact details stated “DATA REDACTED”.

“It implies the site owner conceals their identity,” kept in mind Nurudeen Akewushola, a senior reporter with the International Center for Investigative Reporting (ICIR).

Mr Akewushola, who had actually likewise examined deceitful sites utilizing Artificial intelligence to entice Nigerians into ponzi plans, described that although genuine companies do that too, dubious sites utilize that to conceal.

Back on the control panel, when I clicked the OPay icon, it took me to a user interface that looked precisely like the genuine account. The balance on my phony account was # 150,000, a quantity I do not understand how it arrived.

When I attempted to move # 10,000 to my genuine OPay account, the site stated,” You require to have at least 475 indicate finish this deal. ”

“Click here to purchase more points,” checked out the direction that followed.

This press reporter followed the direction by tapping on the’ Click here to purchase more points’. The site connected me up with another user going to offer points. And the rate for points varies. At the rate of # 1.05 per point, you can select to purchase points worth a minimum of # 1,500 and # 100,000 optimum. I selected the minimum and sent out # 1,500 to one Joseph Nnamani, with 5238010219 being the Moniepoint account offered.

After the transfer was finished, I returned to click’ I have actually sent out the cash’. The site directed me to the supplier’s dm on WhatsApp, where I would later on share the invoice of the deal

Minutes after sharing the invoice as advised, the supplier acknowledged the cash. I examined the site and understood the deal had actually gone through effectively. My control panel showed 1,428.57 points. Method more than what I required to move.

I moved # 10,000 from the parody account into my genuine OPay account with 475 points and even produced an invoice that looks precisely like the initial one for the phony deal. For the invoice generation, I was charged 650 points.

The deal invoice looked real. Despite the fact that I didn’t get any cash in my genuine account, it therefore ends up being challenging for anybody to identify any distinction in between Slipcraft and authentic invoices.

“In a location like Nigeria where bank informs take some time, and the majority of traders do not understand how to browse bank apps, a lot of traders are currently susceptible. Other than for those who have a point of sale (POS) device,” stated Aminu Kure, a lender from Sokoto.

“But the number of these minor traders can manage such?” he queried.

In Nigeria, users of Slipcraft danger conviction for the following criminal offenses under the Cybercrimes Act 2015 (as modified 2024):

Area 13 criminalises computer-related forgery (intentionally accessing a system and inputting, changing, erasing or reducing information to produce inauthentic information meant to be dealt with as genuine). Charge consists of jail time for not less than 3 years or a fine of not less than 7,000,000 or both.

Area 14 talks about computer-related scams. Charges begin at not less than 3 years or 7 million and increase to not less than 5 years or 10 million for the electronic-message variation.

Associated arrangements cover identity theft/impersonation (Section 22), deceitful issuance of electronic directions, and abuse of gadgets. Try, conspiracy, and helping and abetting are likewise punishable (Section 27).

“Advance Fee Fraud and Other Fraud Related Offences Act 2006: Obtaining home by false pretense (or causing shipment of residential or commercial property) with intent to defraud brings jail time of not less than 7 years and approximately 20 years, without choice of fine in most cases,” stated Abdulwasiu.

He even more stated that the Criminal Code Act, Penal Code and the EFCC (Establishment) Act cover acquiring by false pretenses (the classic “419” offense) and empower the Economic and Financial Crimes Commission to examine, prosecute, freeze accounts, and look for loss of earnings.

“Operators of the “backdoor” site, users who produce parody accounts and produce invoices to cause genuine transfers or goods/services, and those who help with (consisting of by offering “points”) deal with arrest, prosecution in the Federal High Court or specialised offenses courts, jail time, fines, and property forfeit. Current EFCC cases including unauthorised credits, system control, and phony paperwork show that courts deal with electronic forgery and scams seriously, frequently purchasing restitution and concurrent sentences. Money-laundering arrangements can use to the profits. Jurisdiction reaches acts impacting Nigerian systems or victims even if servers are offshore,” he ended.

Beyond TikTok

An evaluation of the site exposed there is a link causing a Telegram neighborhood with over 61,000 customers. The activities in the neighborhood cut throughout guidelines on how to browse the site, the number of points it costs for invoice generation and updates about brand-new functions on the site.

A message from the group dropped in June 2026 checks out:

“Our OPay trick service simply improved. At this moment, it is nearly difficult to inform whether you are utilizing the genuine OPay app or our OPay trick service.”

“We made a little upgrade to the Opay Prank Service.

Abdulwasiu thinks Telegram’s Terms of Service restrict frauds and scams. “The platform asserts that it eliminates such material when found, uses AI for public areas, and has actually erased countless groups/channels,”he discussed.

He included that public groups that freely talk about navigation of the site and offer “points” for gain access to fall within the classification of material Telegram declares to moderate. Continued operation of such groups reveals insufficient proactive or responsive enforcement on the general public side of the platform.

“Private chats and channels present various technical and personal privacy difficulties; the failure is clearer for public groups that operate as open markets for tools of scams.”

He recommended this examination to prioritise proof conservation, intermediary with EFCC or Nigeria Police cybercrime systems, and official notifications to the platforms under their own reporting systems and relevant Nigerian or foreign laws.

Kuda Confirms Findings

Before publication, I shared my findings with both Kuda and OPay through e-mail.

In action, the Kuda group acknowledged my e-mail and ensured me that the scams group was examining the matter. In a subsequent action, the scams group later on validated this press reporter’s findings,

“We checked out the site and discovered components impersonating the brand name,” the feedback checks out in part.

Opay is yet to provide reactions to concerns sent out to its client care e-mail since press time.

On the platform side, this press reporter reported the Telegram channel, ‘Slipcraft’, to Telegram. On TikTok, Rozay’s and 2 others’ comparable videos were reported to TikTok for promoting scams.

Efforts were made to reach the Economic and Financial Crimes Commission (EFCC), through its representative, Mr Dele Oyewale. All calls put to his line were left ignored, and messages looking for a reaction sent out to his personal dm on WhatsApp were seen however left unreplied at the time of filing this report.

Slipcraft Responds,

In reaction to the concerns asked by this press reporter, Slipcraft directed this press reporter to access its terms. “Every concern here is addressed in our terms,” checks out a personal message shown this press reporter by means of Telegram.

In its terms, it is described that Slipcraft is an innovative material tool. It creates simulated e-mails, invoices, notices, and visual mock-ups styled after the look of extensively acknowledged payment, wallet, and messaging brand names. It is meant for novelty, funny, style prototyping, UX research study, material development, and security-awareness education.

“Slipcraft is not a bank, payment processor, money-transmitter, escrow service, or messaging service of any third-party brand name. Slipcraft does stagnate cash, hold funds, settle deals, or send out genuine notices on behalf of any platform. Any output produced by the Service is simulated material just and has no monetary credibility whatsoever.”

The terms likewise kept in mind that Slipcraft might not be utilized for tricking, defraud or impersonate. Might not be utilized for cash laundering, fabrication of proof for legal case, phishing, harassment, amongst others.

“Engaging in any forbidden usage will lead to instant termination, loss of any balance or credits, and might be reported to law-enforcement and impacted 3rd parties,” it alerted.

When this press reporter asked whether the business is mindful that its services are being utilized for scams, the handler all of a sudden stopped reacting. Slipcraft is yet to offer responses to follow up concerns asked as at press time.