Nigerian business banking compliance teams can hand AI agents the cross-checking: matching BVNs of directors and signatories, reading company registry records, reconciling import documents with FX payments, and drafting alert and report narratives. Compliance officers keep decisions to onboard, exit or report. CBN's AML/CFT rules and the Nigeria Data Protection Act 2023 govern the work.
What keeps business banking compliance busy in Nigeria?
Most business customers are small and medium enterprises, and many are cash-heavy. A distribution company may bank daily cash takings from several outlets, run a fleet of POS terminals, and pay suppliers across several states. Distinguishing normal trading from structuring is the core monitoring problem.
Onboarding means verifying the company against the company registry, collecting director and signatory BVNs, checking tax identification, and confirming special AML registration for businesses in designated non-financial sectors such as dealers in high-value goods. Records at the registry are not always current, so analysts reconcile what the registry says with the board resolution and the account mandate.
Trade and FX add a layer. Importers request foreign currency against import documentation, and compliance checks that the documents, the goods and the payments line up. Reports to the financial intelligence unit, CBN examinations and periodic reviews of higher-risk customers fill the rest of the week.
Where do AI agents earn their keep?
- BVN and registry reconciliation (depth 1). The agent matches director and signatory BVN details with the registry record and the mandate, and lists every mismatch: a director on the registry who is missing from the mandate, a changed name, a stale address.
- Trade document review (depth 1). For an import payment, the agent reads the invoice, the import documentation and the payment instruction, and flags differences in value, goods description or beneficiary. Trade-based money laundering often hides in exactly those differences.
- Cash pattern triage (depth 2). The agent reviews cash deposit alerts against the customer's declared business, branch pattern and history, and drafts a disposition for the analyst.
- Report narrative drafting (depth 2). The agent drafts the suspicious transaction report narrative with the supporting transactions attached. A compliance officer edits and files.
Notice what is missing: no depth 3 or 4. In business banking compliance, the value comes from faster, better-evidenced files. Letting an agent block a payment or close an account adds risk without adding much speed.
What stays with the compliance officer?
The chief compliance officer and the board carry the bank's AML/CFT obligations under CBN rules, and they cannot pass them to a system. Filing, accepting a politically exposed customer, applying enhanced due diligence, blocking an FX request and exiting a customer are decisions a named person makes and records.
Local knowledge is a reason as much as a rule. A compliance officer in Kano or Onitsha knows which trading patterns are normal for a market and which are not. The agent can surface the pattern; the person knows the market. This is the posture we set out in AI compliance agents: second line, never the last word.
Who owns the agent matters too. Our article on who should own an AI agent in a business argues the chief compliance officer should own its risk even if IT runs it.
Which Nigerian rules apply?
The Central Bank of Nigeria supervises banks, including their AML/CFT programmes, customer due diligence, beneficial ownership checks and transaction monitoring. Reports go to the financial intelligence unit, and FATF's recommendations sit behind the regime. Banks with capital markets subsidiaries also deal with SEC Nigeria.
The Nigeria Data Protection Act 2023, enforced by the Nigeria Data Protection Commission, applies to the personal data of directors, signatories and beneficial owners. The bank must have a lawful basis, use the data for its stated purpose, secure it, and take care when data leaves Nigeria, which matters if the agent's model runs abroad. Our piece on the Nigeria Data Protection Act and AI agents covers transfers and impact assessments.
There is no AI-specific law. Our overview of how AI agents are regulated in Nigeria covers the regulators and the gaps.
This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.
What does a good first 90 days look like?
Days 1 to 30: write the business case in analyst hours saved per file and per alert, not in headcount. Our guide on how to write a business case for AI agents shows how. Agree where the agent's data will be processed and whether a transfer assessment is needed.
Days 31 to 60: run BVN and registry reconciliation at depth 1 on a sample of recent SME files. Track how often the agent and the analyst disagree, and why.
Days 61 to 90: add trade document review at depth 1 for import payments. If both capabilities hold up, consider cash triage at depth 2 for one branch cluster, with every draft reviewed.
Questions people ask
Can an agent approve a foreign currency request for an importer?
No. It can check the documents and flag inconsistencies, but approving or rejecting the request is a decision with regulatory consequences that stays with authorised staff.
Does the agent need to run in Nigeria?
Not necessarily, but if personal data leaves Nigeria the bank must meet the Act's transfer conditions. Many banks prefer local processing for customer data and confirm the position with counsel.
How does this compare with business banking compliance in Germany?
The tasks are similar, but Germany's ownership work centres on partnership structures and the transparency register. See our brief on compliance agents in German business banking.