Nigeria’s AML Data Tsunami: 41 Million Transactions, But Can Anyone See the Red Flags?

• Nigeria’s financial intelligence system is receiving transaction reports on an enormous scale. But volume is not the same as intelligence. The harder test is whether banks, regulators and investigators can turn millions of reports into the few patterns that reveal corruption, money laundering and illicit financial flows.

The Nigerian Financial Intelligence Unit, NFIU, received 25.8 million Currency Transaction Reports, 82,143 Suspicious Transaction Reports and 23,364 Suspicious Activity Reports in 2024, according to its latest annual report. The figures show the extraordinary volume of financial information now flowing into Nigeria’s AML system.

The claim of more than 41 million CTRs therefore needs to be tied to a particular reporting period or NFIU dataset before being presented as a current annual figure. The underlying trend, however, is clear. Reporting volumes are enormous.

A CTR is not itself an accusation of wrongdoing. Under Nigeria’s current framework, reporting entities file CTRs when transactions cross prescribed thresholds. The NFIU says CTRs cover domestic transactions of at least ₦5 million for individuals and ₦10 million for corporate entities, alongside specified international transfers of $10,000 or more. STRs, by contrast, are based on suspicion and have no minimum transaction value.

That distinction matters.

A person depositing ₦6 million is not automatically suspicious. A company moving ₦20 million is not automatically laundering money. The intelligence value comes from what those transactions look like when placed beside the customer’s profile, previous activity, beneficial ownership, related accounts and other available information.

This is where PEPs become important.

The NFIU says reporting entities do not file an STR simply because someone is a Politically Exposed Person. Suspicion still has to exist. But PEPs are subject to closer monitoring and enhanced due diligence, while PEP transactions are also subject to regulatory reporting requirements.

For banks and other reporting entities, that means knowing the customer is only the beginning.

A politically exposed customer whose declared income is modest but whose accounts suddenly receive large payments from contractors, companies or unrelated third parties presents a different risk picture. So does a government official whose account activity does not fit the person’s known profile.

The challenge for the NFIU is therefore not simply collecting more reports. It is separating noise from intelligence.

Nigeria’s reporting architecture already receives information from banks, other financial institutions, BDCs, capital market operators, virtual asset service providers and designated non-financial businesses and professions. The NFIU’s mandate is to analyse those disclosures, connect them with other information and disseminate useful intelligence to law enforcement and regulators.

That creates a difficult compliance question for the entire system.

What happens when 25 million reports arrive but the underlying systems cannot adequately connect the dots?

The answer cannot simply be more reporting.

Reporting entities need better data quality, stronger transaction monitoring and meaningful customer risk assessments. Regulators need analytical capacity. Investigators need timely intelligence. And financial institutions need to understand that filing a report is not the end of their AML responsibility.

The NFIU itself says an STR does not establish criminal guilt. It is intelligence that may warrant further analysis or investigation.

That distinction should remain central as Nigeria expands its financial intelligence infrastructure.

Compliance Takeaway: Nigeria’s AML challenge is no longer just getting institutions to report. It is making millions of reports useful. The real test is whether CTRs, STRs and PEP information can be connected, analysed and converted into actionable intelligence without treating legitimate customers as criminals simply because their transactions cross a threshold.