Security for your Tanzania National ID (NIDA).

In January 2020, Tanzania is the main story for biometrics in Africa as its deadline for biometric SIM registration arrived when over 40 per cent of subscribers had still to register. Tanzania’s government plans to block all mobile phone SIM cards that are not registered biometrically by Jan. 20. Officials say the move is aimed at cracking down on cybercrime, which jumped by 82% in Tanzania in 2017.

Before a user uses a SIM Card, the mobile number needs to be fully registered, all you need is to visit any telco shop or Registration agents with your valid identification to register. Tanzanians register their SIM card using Biometric registration process (New and existing SIM Card) they have National ID/ National ID number.

The conversation revolves around SIM cards and its blockage, however, this is not the article on this subject but rather on the large picture of the National ID and security concerns. So what are these IDs?

National Identification Authority (NIDA) is a public institution with a mandate of registering and issuing Secured National ID Cards to Citizen, Legal Residents and Refugees who are 18 years and above.

NIDA also manages the National ID Database. Data stored in the NIDA database is then shared by NIDA stakeholders eg. Banks, Social Security funds for their customer Identifications processes. In other words, NIDA IDs are the universal identifiers.

Eligibility: All citizens, legal residents and refugees living

in Tanzania, aged 18 years and above

Credentials:

• The unique 20-digit national ID number (NIN)

• National ID smartcard (80kb contactless)

Authentication:

• Fingerprint or PIN matching against a central database through Common Interface Gateway (CIG) and APIs

• Fingerprint matching against smartcard

• Secure web portal to access demographic data (NIN + PIN)

• PKI for authentication when online services

While there are a lot of undeniable benefits of a centralised system for information, also there is a security concern from both those who are tasked with safeguarding the information as well as ordinary citizens which doesn’t fully understand the potential and threats associated with their National ID. To me, the greatest threat the IDs pose is the risk of fraud and identity theft. Since everything is connected, this means the bigger the loss.

Identity theft occurs when an assailant impersonates you for their own gain using stolen information that is often used to identify you (i.e. your NIDA ID Number, address, etc.). Examples of some of the nefarious actions that may be carried by a criminal using your identity include:

Opening bank or credit accounts tied to you.

Filing a bogus tax return and collecting your refund.

Making online purchases, sometimes with the intention of selling those goods on the black market.

Claiming your identity to shift medical expense liability.

There are common ways in which your identity can be stolen. The common schemes are;

• Stealing: Wallets and purses; mail, such as credit card and bank statements; pre-approved credit offers; new checks; personnel records; passport or license; or tax information.
• Phishing: Fake email, spam, or pop-up messages look as if they are from actual financial institutions or businesses. You are requested to reveal your personal information in order to renew an account, receive the prize, etc.
• Dumpster Diving: Bills or other paper with personal information is taken from your trash.
• Changing Your Address: Billing statements in your name are diverted to another location by completing a “change of address” form.
• Skimming: Credit or debit card numbers are stolen by using a special storage device when processing your card.

I hope this information gives you light on what can happen when your NIDA ID and/or number is stolen. Keep it safe and don’t share it with anyone unless it is absolutely necessary and you understand its uses.