42,082 Suspicious Transactions: Inside Nigeria’s Expanding Financial Crime Detection Network

Nigeria’s financial system generated tens of millions of regulatory alerts in 2025. Buried inside that enormous stream of data were 42,082 transactions considered suspicious enough to be reported to the Nigerian Financial Intelligence Unit, NFIU.

The number is significant, but the more important question is what happens after the report is filed.

A suspicious transaction report is not a finding of guilt. It is an intelligence signal. It tells the financial intelligence system that something about a customer, transaction or pattern warrants closer examination because it may be connected to money laundering, terrorist financing, proliferation financing or another form of unlawful activity.

The NFIU’s 2025 reporting data therefore offers a rare window into the mechanics of Nigeria’s financial crime detection architecture. It also reveals a growing tension at the heart of compliance: financial institutions are generating enormous quantities of data, but the value of that data ultimately depends on whether investigators can turn alerts into actionable intelligence.

According to the NFIU’s 2025 Annual Report, reporting entities submitted 42,082 Suspicious Transaction Reports, alongside 41.72 million Currency Transaction Reports and 10,513 Suspicious Activity Reports. The NFIU maintains an official archive of its annual reports and regulatory guidance.

The figures represent a substantial change from the previous year. In 2024, reporting entities submitted 82,143 STRs and 23,364 SARs. The 2025 STR figure therefore represents a fall of almost 49 per cent, while SARs fell by roughly 55 per cent. At the same time, CTRs rose from 25.82 million to 41.72 million.

That divergence is one of the most interesting compliance stories hidden inside the numbers.

When fewer alerts may not mean less crime

Imagine a customer who operates a small import business.

Over several months, the customer’s account receives payments from dozens of apparently unrelated companies. The funds arrive in different amounts, are rapidly transferred to another account and are eventually converted into foreign currency. Individually, none of the transactions may appear extraordinary. Collectively, however, the pattern may suggest something very different.

A modern AML system should not simply ask whether one transaction exceeds a threshold. It should ask whether the customer’s behaviour makes economic sense.

Is the account being used consistently with the customer’s stated occupation?

Are there unexplained third-party payments?

Are funds moving rapidly through several accounts?

Is there a relationship between seemingly unrelated beneficiaries?

Are the same devices, addresses, telephone numbers or businesses appearing across multiple accounts?

These questions are increasingly important because the NFIU itself has identified emerging risks involving corporate entities acting as intermediaries for virtual asset service providers, personal accounts being used for business transactions, and public funds allegedly being diverted through third-party entities.

Consequently, the fall in STRs should not automatically be interpreted as evidence that suspicious financial activity has declined.

It could indicate improved filtering. It could reflect changes in reporting behaviour. It could result from better technology and more precise alerts. It could also raise concerns about under-reporting or overly conservative internal compliance decisions.

The distinction is critical.

The NFIU has said its suspicious transaction reporting guidelines are designed to improve the quality of reports, reduce false positives and defensive filings, and encourage risk-based detection.

That suggests the regulatory objective is shifting from simply producing more alerts to producing better intelligence.

Banks remain the principal gatekeepers

Deposit Money Banks continue to dominate the reporting ecosystem.

In 2024, banks submitted 73,531 of the 82,143 STRs received by the NFIU, accounting for approximately 89.5 per cent. Other Financial Institutions submitted 5,442, while capital market operators and insurance companies submitted 1,796. Designated Non-Financial Businesses and Professions contributed 1,013 reports and Virtual Asset Service Providers filed 361.

This places banks at the front line of Nigeria’s financial crime controls.

But it also exposes them to a difficult operational problem.

A large bank can process millions of transactions every day. Its AML system may generate thousands of alerts. Human investigators then have to determine which alerts represent genuine risk and which are simply unusual but legitimate customer behaviour.

Consider a second scenario.

A customer receives N18 million from a newly incorporated company. The customer describes the payment as consultancy fees. Two days later, the money is divided among five accounts, with portions transferred to a Bureau de Change operator and a crypto-related business.

An automated system may flag the transaction because of the size, velocity and counterparties. But the alert itself does not prove money laundering.

The compliance team must establish the customer’s source of funds, purpose of the transaction, beneficial ownership of the companies involved and the commercial rationale behind the transfers.

That is where compliance stops being a software problem and becomes an investigative discipline.

The public sector risk is particularly revealing

One of the NFIU’s reported concerns is the movement of public funds through third-party entities.

This is potentially significant because the laundering of public money does not necessarily resemble traditional criminal activity. It can involve apparently legitimate companies, invoices, consultancy arrangements, procurement contracts and bank transfers.

A hypothetical example illustrates the problem.

A government-linked entity awards a contract to Company A. Company A pays Company B for “consultancy”. Company B then transfers money to Company C, which has no obvious connection to the original contract. Company C purchases property or sends funds offshore.

Viewed separately, each payment may have a commercial explanation.

Viewed as a chain, the transactions may reveal layering, a classic money laundering technique.

The NFIU has specifically identified the diversion of public funds through third-party entities as an emerging financial crime risk. It has also highlighted frequent cash withdrawals from government accounts and the use of illegal Bureau de Change operators to launder funds for politically exposed persons and some government agencies.

That places banks under pressure to understand not merely who owns an account, but why money is moving through it.

The fintech problem is different

Fintechs have transformed the speed and accessibility of financial transactions. They have also created new compliance challenges.

A traditional bank may have years of customer information, branch interactions and documented financial history. A digital financial platform may onboard a customer remotely and process large volumes of transactions without the customer ever visiting a physical branch.

That creates a different investigative environment. A suspicious account may move money between several digital platforms before investigators identify the common beneficiary. The emergence of virtual assets adds another layer.

The NFIU’s 2024 data showed VASPs filing 361 STRs, compared with no STRs in the previous reporting category during 2024’s earlier reporting pattern. The NFIU has also identified corporate entities being used as intermediaries for transactions involving VASPs as a growing risk.

A third scenario could involve an individual who receives money into a personal account, transfers it to a company, moves it through a digital asset platform and eventually converts the proceeds back into fiat currency.

The investigation is no longer simply about a bank account. It becomes a network analysis exercise. Who sent the money? Who received it? Which accounts were connected? What devices were used? Which businesses shared directors, addresses or telephone numbers? Where did the funds ultimately settle?

From alerts to intelligence

This is where the NFIU’s role becomes particularly important.

In 2024, the agency said it disseminated 3,030 proactive intelligence reports and 1,866 reactive intelligence reports to competent authorities. The leading offences associated with those intelligence reports included corruption, with 1,958 reports, fraud with 1,022, stand-alone money laundering with 705, criminal tax offences with 385 and illicit drug trafficking with 294. Terrorist financing accounted for 239 reports.

Those figures demonstrate that STRs are only the beginning of the process.

The ultimate measure of an AML system is not the number of alerts generated. It is whether those alerts help investigators identify networks, freeze assets, recover stolen funds, prosecute offenders and disrupt criminal activity.

That is why the quality of an STR matters.

A vague report saying that a transaction is “suspicious” provides limited investigative value.

A strong report can provide context, transaction history, counterparties, beneficial ownership information, unusual behavioural patterns and the rationale for suspicion.

Technology is becoming the next battleground

Nigeria’s regulators are also moving towards automated AML systems. The Central Bank of Nigeria has proposed standards requiring regulated financial institutions to deploy intelligent systems capable of real-time transaction monitoring, anomaly detection, behavioural analysis and risk scoring. The systems are also expected to integrate with core banking and customer onboarding platforms and support automated regulatory reporting.

That shift creates another compliance question. Can Nigerian institutions deploy artificial intelligence effectively without creating a new generation of false positives, discriminatory risk scoring or unexplained automated decisions?

An algorithm may identify a customer as high risk. But compliance officers still need to understand why.

There is also the issue of data governance. AML systems process sensitive financial and personal information. As institutions increase their dependence on AI, cloud systems and third-party technology providers, cybersecurity and data protection become inseparable from financial crime compliance.

The DNFBP blind spot

Banks are not the only gatekeepers. The NFIU reported that 44,256 Designated Non-Financial Businesses and Professions had been enrolled on a simplified suspicious transaction reporting platform developed with the Special Control Unit Against Money Laundering.

The sectors include real estate, casinos, dealers in precious metals and stones, lawyers, accountants and trust service providers.

These sectors matter because criminals do not need to keep illicit money in a bank account indefinitely.

They can convert proceeds into property, precious metals, businesses or other assets.

The NFIU has specifically warned that terrorist organisations exploit dealers in precious metals and stones to finance their activities, while some operators allegedly use personal savings accounts or operate without mandatory certification.

That makes the expansion of reporting obligations beyond banks an important development.

The question regulators should now be asking

Nigeria’s financial crime framework is producing more data than ever. The real test is whether the country is producing enough intelligence. The 42,082 STRs recorded in 2025 should therefore be viewed neither as a victory nor as a failure. They are signals from a financial system under increasingly sophisticated surveillance.

The next questions are harder. How many of those reports resulted in intelligence packages? How many triggered investigations? How many led to asset freezes? How many produced prosecutions? How much money was recovered? How many reporting institutions were penalised for failing to report? And perhaps most importantly, how many suspicious transactions were never detected in the first place?

The NFIU’s own data shows that Nigeria is increasingly capable of seeing unusual financial behaviour. The next phase of the AML fight will be determined by whether regulators, banks, fintechs and law enforcement agencies can connect those individual signals into coherent investigations.

In financial crime, the transaction is rarely the whole story. It is usually the first clue.