AI agent training for credit controllers at accounting practices in Nigeria

Fake transfer alerts, withholding tax and slow-paying institutional clients make fee collection at a Nigerian accounting practice exacting. Credit controllers need training to supervise agents that match receipts and chase invoices: each agent's depth, reading verdicts, trusting only the bank feed, and keeping disputes and write-offs with people. The Nigeria Data Protection Act 2023 governs the data.

What does a credit controller handle at a Nigerian accounting practice?

Practices bill audit, tax, payroll and advisory fees to a varied client base: owner-managed businesses, local subsidiaries of foreign groups, non-governmental organisations and some public bodies. Fees carry VAT, and corporate clients typically deduct withholding tax and pay the balance, with the credit evidenced later. Some engagements are invoiced in foreign currency, which brings exchange rate questions into every receipt.

Payment habits vary widely. Owner-managed clients often pay after the audit report is signed; institutional clients can take months to process an invoice; and some clients send a screenshot or a text alert as proof of payment. The credit controller matches receipts, chases arrears, collects withholding tax credit evidence, reports aged debt and advises partners on whether to start new work.

Where can agents take on the work?

Foreign currency fees and the fake alerts the practice has already caught belong in the certification set. Depth from 1 (read) to 4 (moves money or is hard to undo) follows that evidence and the role's ceiling.

Every one of these depends on the bank feed, not on what a client says. A text alert or screenshot is external evidence, and fake alerts are a known fraud. An external claim cannot clear an invoice or release a document.

What must the controller keep?

What credit controllers should never let an agent do lists the red lines. In a Nigerian practice they include:

• releasing a signed report or certificate against a payment not yet in the feed;
• agreeing instalments or fee discounts;
• writing off fees, including withholding credits that will never arrive;
• deciding to pause an engagement or decline new work for non-payment;
• handling disputes with institutional clients, where relationships and procurement rules matter.

A signed audit report released against a fake alert cannot be recalled, and that single risk shows why controllers are the real control in an agent deployment.

What skills should the training build?

The first skill is reading verdicts. Each action meets five bounds: role scope, certificate, sources, the practice's own limits and the platform guardrails. The lowest wins and the record names it. A controller should be able to explain why a receipt was held: perhaps the amount matched but the payer's name did not.

The second is provenance discipline. The practice's bank feed and ledger are sealed; a withholding credit note issued by the tax authority comes from a named source; a client's screenshot is external. Training should include a real-looking fake alert so the habit sticks.

The third is banking corrections. If the agent keeps misreading a large client's combined payment for several subsidiaries, fix its sources; teaching credit controllers to bank corrections shows the routine. The fourth is the lifecycle: an agent's certificate lapses after 90 days, and a run that clears no depth drops it to depth 1 the same day.

Which Nigerian rules apply?

The Nigeria Data Protection Act 2023, enforced by the Nigeria Data Protection Commission, requires a lawful basis for processing, purpose limitation, minimisation, accuracy and security, and gives individuals rights over their data, including in relation to automated decisions. Clients' payroll and tax data includes personal data of their staff; the collections agent should read billing and contact data only.

Payments and foreign exchange run under the Central Bank of Nigeria's rules, which affect how foreign currency fees can be received and refunded. The professional institute's code imposes confidentiality, which limits what a reminder may say and who may receive it. If the practice serves EU-based clients, GDPR may also apply.

This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.

A 90-day plan for the practice

Days 1 to 30. Literacy for the controller, finance staff and partners: depth, verdicts, provenance, the record. Write the practice's own limits, including that no document is released without a confirmed receipt.

Days 31 to 60. The controller reviews matching, withholding tracking and reminders daily, and calibrates weekly with a partner on held receipts and foreign currency differences.

Days 61 to 90. Refund release ties to a current certificate. Rehearse a certificate lapse at month end, when receipts peak.

Audit staff who release signed reports must follow the same rule on confirmed receipts, so they belong in the training too; see which roles in accounting practices need agent training. Why it matters at partner level is argued in accounting practices will not scale agents without trained reviewers, and the guide to AI agent skills by role covers the rest.

Where the Academy fits

Pryme Intelligence Academy lessons, labs and tests are free, and every lab runs in a free Build workspace, which lets a small practice train before committing. The controller takes the Operator track: an exam of 40 questions with 32 to pass, and a two-week practicum of real review decisions. Certificates are issued through VerifyDoc.ai and can be checked by number or QR code.