malicious code
Malicious code is software written on purpose to damage, spy on, or steal from your device, phone, or bank account without your consent.
In plain English
Almost everyone has clicked a link they should not have clicked, that message promising a customs refund, a bank alert with a strange link, a promo screaming that you won a car you never entered for.
Most times nothing happens, or so it seems. But sometimes that one click calmly installs a small programme on your phone or computer, and that programme is what we call malicious code.
It is not always dramatic. It does not always freeze your screen with a skull and crossbones like in the movies. Often it just sits there, reading your messages, copying your bank app password, waiting for the moment you open your banking app to record your login details.
In Nigeria this shows up as fake loan apps that ask for permissions they have no business needing, or a cloned bank website that looks exactly like your bank's page until you notice the web address is slightly off. Someone in London might get a text pretending to be from their bank about a suspicious transaction, with a link that installs code built to steal their online banking session the moment they type in their details.
For someone sending money home from abroad, this matters double, because the fraudster is more than after your account, they are after that ₦150,000 you just sent your mother for her shop rent, sitting there in her account waiting to be swept away by code she never saw and never invited.
Banks fight this with firewalls, fraud monitoring, and constant software updates, but the first line of defence is still you, refusing to click what you did not ask for.
Adaeze downloads a free loan app promising instant approval. The app secretly installs code that reads her SMS messages, captures the one time password her bank sends, and within minutes ₦230,000 leaves her account to a stranger she has never met.
Questions people ask
How is malicious code different from a virus?
A virus is actually one type of malicious code. The term malicious code covers viruses, worms, spyware, ransomware, and any other software built to harm you, spy on you, or steal from you, so virus is just one member of a much larger, messier family.
Can malicious code get into my phone without me clicking anything?
It is rare but possible, usually through outdated apps or operating systems with unpatched security holes. This is why those annoying software update notifications actually matter, they often close the exact gaps that malicious code is built to slip through.
What should I do if I suspect my banking app has been compromised?
Call your bank immediately to freeze the account or flag it for monitoring, change your passwords from a different, clean device, and uninstall any suspicious apps you recently downloaded before doing anything else on that phone.
Last reviewed