Project – Privacy-Preserving Digital Identity Verification and User Trust in Financial Technology Platforms: An Assessment of Selected Fintech Users in Lagos State.

CHAPTER ONE

INTRODUCTION

Title: Privacy-Preserving Digital Identity Verification and User Trust in Financial Technology Platforms: An Assessment of Selected Fintech Users in Lagos State

1.1 Background to the Study

The rapid advancement of information and communication technology has significantly transformed the global financial services industry, particularly through the emergence and expansion of financial technology (Fintech) platforms. Financial technology refers to the application of digital technologies to the delivery, management, and improvement of financial services, including electronic payments, mobile banking, digital lending, money transfers, savings, investment management, and other financial transactions. These platforms have changed how individuals access financial services by providing convenient, flexible, and relatively accessible alternatives to traditional banking operations. Through mobile applications, web-based platforms, and digital payment systems, users can perform financial transactions without necessarily visiting physical banking institutions. However, the increasing dependence on digital financial services has also created the need for reliable identity verification mechanisms to ensure that individuals accessing financial platforms are properly identified and authorised. Identity verification has therefore become an important component of digital financial security because it helps financial service providers prevent impersonation, identity theft, fraudulent transactions, and unauthorised account access. Akinwale and Kyari (2022), in their study of factors influencing attitudes and intention to adopt financial technology services among end-users in Lagos State, established that perceived usefulness, ease of use, and service trust significantly influence users’ attitudes towards Fintech adoption. Their findings demonstrate that the development of financial technology platforms must consider not only service accessibility but also the confidence users have in the security and reliability of these platforms.

Digital identity verification has become an essential requirement in modern financial technology operations because financial institutions must establish the identities of customers before granting access to certain financial services. Digital identity verification involves the use of electronic technologies and identity-related information to confirm that an individual is who they claim to be when registering, accessing, or conducting transactions through a digital platform. Common verification methods include the use of Bank Verification Numbers (BVN), National Identification Numbers (NIN), one-time passwords (OTPs), facial recognition, fingerprints, identity document validation, and other biometric or knowledge-based authentication procedures. These methods are intended to reduce fraudulent activities, strengthen account security, and support regulatory requirements relating to customer identification and Know Your Customer (KYC) procedures. In Nigeria, the use of digital identity information has become particularly relevant to the financial services industry because of the need to establish reliable customer identities across banking and electronic payment platforms. The National Identity Management Commission Act (2007) established the institutional framework for national identity management, while the Central Bank of Nigeria’s regulatory framework for financial institutions places considerable emphasis on customer identification and verification. These developments demonstrate the growing relationship between digital identity management, financial security, and access to electronic financial services. Nevertheless, the collection and processing of identity information also raise important concerns about how personal data are stored, accessed, shared, and protected against unauthorised use.

Despite the benefits of digital identity verification, the growing collection of personal and biometric information by financial technology platforms has intensified concerns about individual privacy and data security. Users may be required to submit sensitive information such as full names, residential addresses, telephone numbers, identity numbers, photographs, facial images, fingerprints, bank account details, and other personal records during account registration and identity authentication. Although these details may be necessary for security and regulatory purposes, their collection and storage can expose users to risks such as identity theft, unauthorised disclosure, data breaches, surveillance, and misuse of personal information. Eke et al. (2022), in their study titled Nigeria’s Digital Identification (ID) Management Program: Ethical, Legal and Socio-Cultural Concerns, examined the ethical, legal, and social implications of Nigeria’s digital identity management system. Their findings identified privacy and data security as major concerns associated with the management of digital identity information, highlighting the importance of responsible data governance and public trust. The study demonstrates that the successful implementation of digital identity systems depends not only on their ability to establish identity but also on the extent to which individuals are confident that their personal information will be adequately protected. This concern is particularly important in financial technology because users must often provide sensitive identity information before they can access financial products and services.

Privacy-preserving digital identity verification has consequently emerged as an important approach to addressing the tension between identity authentication requirements and the protection of personal information. It refers to the application of technological and organisational mechanisms that allow an individual’s identity or eligibility to be verified while minimising unnecessary exposure, collection, processing, and disclosure of personal data. Unlike conventional verification systems that may require users to submit extensive personal information to service providers, privacy-preserving approaches seek to limit the amount of information revealed during authentication and ensure that sensitive information is accessed only for legitimate and authorised purposes. Some of the approaches associated with privacy-preserving identity verification include data minimisation, encryption, tokenisation, secure authentication, pseudonymous identification, decentralised identity management, and privacy-enhancing cryptographic techniques such as zero-knowledge proofs. These approaches can help reduce the risks associated with excessive personal data collection and centralised storage. The Organisation for Economic Co-operation and Development (OECD, 2013) emphasises the importance of privacy principles such as collection limitation, purpose specification, use limitation, security safeguards, and accountability in the handling of personal information. Similarly, Cavoukian (2011), through the concept of Privacy by Design, argues that privacy protection should be incorporated into the design and operation of technological systems rather than treated as an additional requirement after implementation. These principles provide a foundation for examining how Fintech platforms can maintain reliable identity verification procedures while respecting users’ privacy rights.

User trust is another important factor influencing the acceptance, adoption, and continued utilisation of financial technology platforms. Trust in Fintech refers to the confidence users place in a digital financial service provider regarding its ability to deliver services securely, protect personal information, process transactions accurately, and act in the legitimate interests of its customers. Unlike traditional banking environments where customers may have direct physical interaction with bank officials, Fintech users often depend on mobile applications and internet-based systems to conduct transactions and submit personal information. Consequently, users may find it difficult to determine how their information is being processed, whether their identity records are adequately protected, and whether the platform can prevent unauthorised access. McKnight, Choudhury and Kacmar (2002) explain that trust in electronic commerce involves beliefs about the competence, integrity, and benevolence of online service providers. Similarly, Gefen, Karahanna and Straub (2003) demonstrate that trust plays an important role in influencing users’ acceptance and utilisation of online services. In the Nigerian context, Akinwale and Kyari (2022) found that service trust had a positive and significant influence on users’ attitudes towards Fintech services in Lagos State. These findings suggest that users’ confidence in financial technology platforms is not determined solely by the convenience of transactions but also by their perceptions of institutional reliability, security, and responsible handling of personal information.

The relationship between privacy protection and user trust has become increasingly important because users’ willingness to disclose personal information often depends on their perception of the benefits and risks associated with such disclosure. Financial technology platforms require certain identity information to provide secure financial services, but users may become reluctant to share their information when they believe that the platform collects excessive data, lacks adequate security safeguards, or may disclose their information to unauthorised third parties. This relationship is commonly explained through the Privacy Calculus Theory, which suggests that individuals evaluate the perceived benefits of disclosing personal information against the possible privacy risks before making disclosure decisions. Culnan and Armstrong (1999) explain that procedural fairness in organisational information practices can influence consumers’ willingness to provide personal information. Similarly, Dinev and Hart (2006) establish that privacy concerns and trust are important considerations in individuals’ decisions to disclose personal information in online environments. More directly, Yisa, Anaraky, Knijnenburg and Orji (2023), in their investigation of privacy decision-making processes among Nigerian men and women, examined how perceived benefits, information sensitivity, and trust influence personal information disclosure decisions. Their findings demonstrate that privacy-related decisions among Nigerian users are influenced by the perceived risks and benefits of disclosure as well as trust in the application. This suggests that privacy-preserving identity verification may contribute to stronger user confidence by reducing unnecessary exposure of sensitive information and providing users with greater assurance regarding the handling of their personal data.

In Nigeria, the expansion of digital financial services has increased the importance of privacy protection and identity security, particularly in Lagos State, which serves as a major commercial and financial centre. The state has a large population of individuals who depend on mobile banking applications, electronic payment platforms, digital lending services, online savings platforms, and other technology-driven financial services. The growing use of these platforms has created opportunities for financial inclusion, faster transactions, and improved access to financial products. However, it has also increased the volume of personal and financial information exchanged through digital channels. Users may be required to provide their BVN, NIN, photographs, facial images, and other identity-related information to complete account registration, increase transaction limits, or access particular financial services. The Nigeria Data Protection Act (2023) establishes a legal framework for the protection of personal information and requires organisations to process personal data in accordance with principles such as lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, and security. The Nigeria Data Protection Commission (NDPC) also emphasises the importance of protecting individuals’ fundamental privacy rights and promoting accountable data-processing practices. Furthermore, Eke et al. (2022) identify significant ethical and socio-cultural concerns associated with Nigeria’s digital identity management system, particularly regarding privacy, security, and public confidence. These developments make Lagos State an appropriate setting for examining the relationship between privacy-preserving identity verification practices and user trust in financial technology platforms.

Although financial technology platforms increasingly depend on digital identity verification to strengthen security and comply with regulatory requirements, important questions remain regarding whether existing verification practices adequately protect users’ privacy and encourage trust. Some verification procedures may involve the collection of extensive personal information without sufficient explanation of the purpose, duration of storage, or circumstances under which such information may be shared. Other concerns relate to the security of centralised databases, the possibility of identity theft, unauthorised access to biometric records, and users’ limited understanding of how their personal information is processed. Wang (2023), in Verification Techniques in FinTech Compared from User Perspectives, examined Fintech verification techniques by incorporating perceived privacy, perceived trust, and perceived satisfaction into the assessment of verification approaches. This demonstrates the importance of considering users’ perceptions when evaluating digital identity verification systems rather than focusing exclusively on technical authentication requirements. Similarly, Akinwale and Kyari (2022) established the relevance of service trust in Fintech adoption among users in Lagos State. Despite these contributions, there remains a need for further context-specific investigation into how privacy-preserving digital identity verification practices influence users’ trust in financial technology platforms in Lagos State. This study therefore seeks to assess selected Fintech users in Lagos State, focusing on privacy protection, digital identity verification practices, perceived data security, and user trust, with a view to understanding how financial technology providers can achieve effective identity verification without compromising the privacy and confidence of their customers.

1.2 Statement of the Problem

The increasing adoption of financial technology platforms in Nigeria has transformed financial transactions by making electronic payments, mobile banking, digital lending, money transfers, and other financial services more accessible to individuals. However, the growing dependence on these platforms has created significant challenges relating to the verification and protection of users’ digital identities. Financial technology providers routinely require customers to submit personal information, including BVN, NIN, telephone numbers, photographs, biometric information, and other identification details before granting access to certain financial services. Although these requirements are intended to prevent impersonation, identity theft, money laundering, and fraudulent transactions, they also expose users to potential privacy and security risks. Users may be uncertain about how their personal information is collected, stored, processed, and shared by financial technology providers. Eke et al. (2022) identified privacy, security, ethical, and socio-cultural concerns associated with Nigeria’s digital identity management programme, indicating that the protection of identity information remains an important challenge in the country’s digital environment. The problem, therefore, concerns how financial technology platforms can effectively verify the identities of their customers without unnecessarily exposing their sensitive personal information.

Another problem relates to the adequacy of existing identity verification practices in protecting users against unauthorised access, identity theft, and misuse of personal information. Although verification methods such as OTPs, BVN, NIN, facial recognition, fingerprint authentication, and identity document validation are widely used in digital financial services, their effectiveness depends on how they are designed, implemented, and managed. The collection and storage of large volumes of personal and biometric information may increase the consequences of data breaches, particularly where appropriate security safeguards and access controls are inadequate. Furthermore, users may not always understand the extent to which their information is being processed or the circumstances under which it may be disclosed to third parties. The Nigeria Data Protection Act (2023) establishes requirements for lawful, fair, transparent, and secure processing of personal information, but the existence of regulatory requirements does not automatically guarantee that every user understands or experiences adequate privacy protection. Consequently, there is a need to assess the extent to which selected Fintech platforms adopt privacy-preserving identity verification practices and the extent to which these practices protect users’ sensitive information.

Furthermore, the growing privacy concerns surrounding digital identity verification may affect users’ confidence in financial technology platforms and their willingness to continue using digital financial services. Trust is particularly important in financial technology because users depend on service providers to protect their financial records, personal identities, transaction information, and other sensitive data. When users perceive that their personal information is inadequately protected, they may become reluctant to provide identification details, complete verification procedures, or continue using particular financial applications. Akinwale and Kyari (2022) established that service trust significantly influences users’ attitudes towards Fintech services in Lagos State. Similarly, Yisa et al. (2023) demonstrated that perceived information sensitivity, privacy risks, perceived benefits, and trust influence personal information disclosure decisions among Nigerian users. These findings suggest that users’ confidence in financial technology platforms may be influenced by their experiences and perceptions of how personal information is handled. However, the extent to which privacy-preserving identity verification practices contribute to users’ trust in selected Fintech platforms in Lagos State requires further investigation.

The central problem addressed by this study is the limited context-specific understanding of the relationship between privacy-preserving digital identity verification and user trust in financial technology platforms in Lagos State. Although digital identity verification is necessary for improving financial security and meeting customer identification requirements, its implementation must also protect users’ privacy, ensure responsible data processing, and promote confidence in digital financial services. Existing studies have examined Fintech adoption, digital identity management, privacy concerns, and trust, but further investigation is required to establish how specific privacy-preserving verification practices influence users’ perceptions of data security, privacy protection, and trust in financial technology providers. The study therefore seeks to assess selected Fintech users in Lagos State by examining the relationship between privacy-preserving identity verification practices, perceived protection of personal information, and user trust. Addressing this problem will provide evidence that may assist financial technology providers in improving identity verification procedures while strengthening privacy protection and customer confidence.

1.3 Objectives of the Study

The main objective of this study is to assess the relationship between privacy-preserving digital identity verification and user trust in financial technology platforms among selected Fintech users in Lagos State.

The specific objectives are to:

1. Examine the digital identity verification practices adopted by selected financial technology platforms used by customers in Lagos State.

2. Assess the extent to which privacy-preserving identity verification practices protect users’ personal and sensitive information on Fintech platforms.

3. Examine the relationship between privacy-preserving digital identity verification and users’ trust in financial technology platforms in Lagos State.

4. Identify the major privacy and security concerns affecting users’ confidence in digital identity verification on financial technology platforms.

1.4 Research Questions

The following research questions will guide the study:

1. What digital identity verification practices are adopted by selected financial technology platforms used by customers in Lagos State?

2. To what extent do privacy-preserving identity verification practices protect users’ personal and sensitive information on Fintech platforms?

3. What is the relationship between privacy-preserving digital identity verification and users’ trust in financial technology platforms in Lagos State?

4. What are the major privacy and security concerns affecting users’ confidence in digital identity verification on financial technology platforms?

1.5 Research Hypothesis

The following null hypothesis will be tested at a 0.05 level of significance:

H₀: There is no statistically significant relationship between privacy-preserving digital identity verification and user trust in financial technology platforms among selected Fintech users in Lagos State.

1.6 Significance of the Study

This study will be significant to financial technology providers, Fintech users, regulatory authorities, financial institutions, policymakers, cybersecurity professionals, and future researchers.

Financial Technology Providers: The study will provide useful information to Fintech companies regarding the importance of incorporating privacy-preserving mechanisms into their digital identity verification procedures. Its findings will help providers understand how data minimisation, secure authentication, encryption, and responsible information management can contribute to improved customer confidence. It may also assist providers in identifying weaknesses in their existing verification processes and developing more privacy-conscious digital financial services.

Fintech Users: The study will increase users’ understanding of the importance of protecting personal information when registering and conducting transactions on financial technology platforms. It will also create awareness of the possible risks associated with excessive data collection, unauthorised information sharing, identity theft, and inadequate security practices. The findings may encourage users to make more informed decisions when providing sensitive identity information to digital financial service providers.

Regulatory Authorities: The study will provide relevant information to regulatory institutions, particularly the Central Bank of Nigeria (CBN) and the Nigeria Data Protection Commission (NDPC), regarding users’ experiences and concerns about digital identity verification. The findings may support efforts to strengthen compliance with customer protection, identity management, and personal data protection requirements.

Financial Institutions: Traditional banks and other financial institutions adopting digital technologies may benefit from the findings by understanding the importance of balancing customer authentication requirements with privacy protection. The study may encourage improvements in digital onboarding, biometric authentication, customer identification, and information security procedures.

Policymakers: The study will provide useful insights for policymakers concerned with digital financial inclusion, consumer protection, cybersecurity, and responsible data governance. It may contribute to policy discussions on how financial technology innovation can be promoted without compromising individuals’ fundamental privacy rights.

Cybersecurity and Data Protection Professionals: The research will provide an understanding of the privacy and security challenges associated with digital identity verification. It may assist professionals in identifying measures for reducing unauthorised access, protecting biometric information, strengthening authentication procedures, and improving data management practices.

Future Researchers: The study will serve as a reference material for future academic investigations into digital identity management, financial technology, information privacy, data protection, and user trust. It will also provide a foundation for further studies involving privacy-enhancing technologies, digital authentication systems, and consumer behaviour within Nigeria’s financial technology sector.

1.7 Scope of the Study

The study focuses on privacy-preserving digital identity verification and user trust in financial technology platforms, using selected Fintech users in Lagos State as its geographical and population context.

In terms of content, the study will examine the identity verification practices adopted by selected financial technology platforms, the extent to which these practices protect users’ personal information, the relationship between privacy-preserving identity verification and user trust, and the major privacy and security concerns affecting users’ confidence in digital financial services.

The study will consider identity verification mechanisms such as BVN and NIN verification, one-time passwords, biometric authentication, facial recognition, identity document validation, encryption, and other relevant privacy protection measures.

The respondents will comprise selected users of financial technology platforms in Lagos State who have experience with digital financial services. The study will not focus on the technical development of a new identity verification application but rather on assessing users’ experiences, perceptions, and trust regarding existing privacy-preserving verification practices.

1.8 Operational Definition of Terms

Privacy-Preserving Digital Identity Verification: The use of technological and organisational procedures to confirm an individual’s identity while minimising unnecessary collection, exposure, processing, and disclosure of personal information.

Digital Identity: The electronic representation of an individual’s identifying information used to establish and confirm their identity when accessing digital services.

Identity Verification: The process of confirming that an individual is genuinely who they claim to be through identification documents, personal information, biometric characteristics, or electronic authentication procedures.

Financial Technology (Fintech): The application of digital technologies to the provision of financial services such as electronic payments, mobile banking, digital lending, money transfers, savings, and investment services.

User Trust: The confidence users have in a financial technology platform’s ability to provide reliable services, protect personal information, secure financial transactions, and prevent unauthorised access.

Data Privacy: The right of individuals to exercise appropriate control over how their personal information is collected, processed, stored, accessed, and shared.

Biometric Authentication: An identity verification method that uses unique physical or behavioural characteristics, such as fingerprints, facial features, or voice patterns, to establish an individual’s identity.

Data Security: The protection of personal and financial information against unauthorised access, alteration, destruction, disclosure, or misuse.

Data Minimisation: The practice of collecting and processing only the personal information necessary for a specific and legitimate purpose.

User Confidence: The level of assurance users have regarding the security, reliability, privacy practices, and dependability of financial technology platforms.

Financial Technology Platforms: Digital applications and electronic systems that enable individuals to access and utilise financial services through internet-connected devices.

Project – Privacy-Preserving Digital Identity Verification and User Trust in Financial Technology Platforms: An Assessment of Selected Fintech Users in Lagos State.