AI agents for business finance: what they can and can't do
What AI agents can do in bookkeeping, close, collections and compliance today, where a person must stay in charge, and how to judge a product.
The short answer
Using a banking app on public Wi-Fi is usually safe from network snooping, because banks and most apps encrypt traffic between your phone and their servers. Encryption does not protect you from a fake website or app, a look over your shoulder, or a phone that already has malware, so the real risks sit there rather than in the Wi-Fi itself.
What actually happens when you join cafe Wi-Fi
When you connect to the Wi-Fi at a restaurant in Lekki, a hotel lobby in Abuja or an airport lounge, your phone sends its traffic through a router that someone else controls. Anyone else on that network, and the person running the router, can in principle see that traffic passing. Years ago that was a serious problem, because many websites sent passwords and pages in plain form that could be read off the network.
That has largely changed. The US Federal Trade Commission's consumer guidance says public Wi-Fi is now usually safe because most websites encrypt the data they exchange with you, and that most mobile apps also use encryption, though it can be hard to tell from the screen. Encryption scrambles information in transit so a snooper on the same network sees noise rather than your login.
What HTTPS and app encryption protect, and what they do not
It helps to be exact about the boundary. Encryption protects the journey, not the destination and not your device.
| Risk | Does encryption help? | Why |
|---|---|---|
| Someone on the same Wi-Fi reading your password as it travels | Yes | The data is scrambled between your phone and the bank's server |
| A fake bank website with a padlock in the address bar | No | The FTC notes scammers can build encrypted sites; the data is protected in transit but goes straight to the scammer |
| A fake 'bank' app installed from a link | No | The app itself is the thief; encryption only hides what it sends home |
| Malware already on your phone | No | It reads the screen or keystrokes before anything is encrypted |
| A stranger watching you type your PIN | No | Shoulder-surfing has nothing to do with the network |
| Losing your phone while still logged in | No | Whoever holds an unlocked phone holds the session |
The padlock or "https" in a browser tells you the connection is encrypted. It does not tell you the site is your bank. That is why the first habit below is about how you reach your bank, not about which network you use.
The risks that matter more in Nigeria
Fake links and look-alike apps
Most account takeovers reported by Nigerian banks start with the customer installing or opening something, not with Wi-Fi interception. In a July 2026 advisory reported by Techeconomy, Fidelity Bank described malware spread through fake adverts, pop-ups and links on social media and messaging platforms, disguised as betting, streaming, phone-cleaning and fake bank-support apps, which then gives fraudsters remote control of the device. A free Wi-Fi login page that pushes you to "install an app to continue" fits the same pattern and should be closed.
Busy places and open screens
Public Wi-Fi is usually in public places. A transaction PIN typed at a crowded table, or an alert screen left open while you queue, can be read by the person behind you. Our guide to keeping your transaction PIN safe covers covering the keypad and choosing a PIN that is not your birth year.
Networks with misleading names
Anyone can name a hotspot "Airport Free WiFi" or after a hotel. Joining one is not by itself fatal if you only use your bank's real app, but it does mean you should not follow any page that the hotspot shows you before you get online.
Safer habits that cost nothing
- Open banking only through the official app you installed from Google Play or the App Store, or by typing the bank's address yourself. Never through a link in an SMS, email, pop-up or social media post.
- If a Wi-Fi sign-in page asks you to install anything or enter card details, close it and use mobile data instead.
- Keep the phone's operating system and the bank app updated; the FTC lists automatic updates as a basic protection.
- Use two-factor protection that does not depend on the network you are on. An authenticator app generates codes on the phone itself.
- Sit with your back to a wall or shield the screen when typing a PIN.
- Log out of banking apps when you finish on a shared or borrowed phone, and never save banking passwords in a browser on someone else's device.
- Switch off "auto-join" for open networks so your phone does not connect to unknown hotspots by itself.
What to check first if you think something went wrong
- Look at your recent transactions and alerts in the official app.
- Check the list of installed apps for anything you do not recognise, especially apps asking for accessibility or screen access.
- If you suspect your phone is compromised, Fidelity's advisory advice is to disconnect it from the internet straight away and call your bank on the number printed on your card or its official site.
- Change your banking password from a device you trust, and follow our first-hour guide after fraud.
Where Pryme fits
Pryme accounts use an authenticator app for login codes rather than SMS codes, plus a transaction PIN, so a code is not sent over the network for anyone to intercept. You can read how this works on our security page. The habits above apply whichever bank you use.
Questions people ask
Is it safe to use my bank app on hotel Wi-Fi?
Usually, from a network point of view, because bank apps encrypt traffic. The bigger risks are fake links, fake apps and people seeing your PIN. Use only the official app and avoid any page the hotspot shows you.
Can someone on the same Wi-Fi see my bank password?
Not when the app or site uses encryption, which almost all banks do. They could see that you connected to a service, but not read the scrambled password.
Does the padlock mean a website is my real bank?
No. The padlock only means the connection is encrypted. Scammers can put a padlock on a fake site, so type your bank's address yourself or use its app.
Should I use a VPN for banking in Nigeria?
A reputable VPN adds a layer on untrusted networks, but it does not stop phishing links or malware. Using mobile data and the official app covers most of the same ground.
Sources
- FTC: Are public Wi-Fi networks safe? What you need to know (Feb 2023) · accessed Oct 2026
- Techeconomy: Fidelity Bank warns customers over Remote Access Trojan malware (advisory of 30 Jul 2026) · accessed Oct 2026
This article is general information, not financial, legal or tax advice. Products described are provided under the terms on this site and are subject to regulation and eligibility.