AI agents for compliance teams in retail banking in Nigeria

Nigerian retail banks' compliance teams can use AI agents to test every charge against the CBN's guide to charges, follow dormant accounts through each required step, check that cross-bank loan recoveries had a valid mandate and draft complaint files. The Central Bank of Nigeria supervises conduct and the Nigeria Data Protection Commission enforces the 2023 Act, so refunds, recoveries and reports stay with people.

What do retail banking compliance teams in Nigeria spend their time on?

Nigerian retail banks serve customers through branches, agents, mobile apps and USSD, at high volume. The CBN supervises them closely on customer treatment, and its examinations regularly test charges, complaints and the handling of customer funds.

Charges. The CBN publishes a guide setting the charges banks may apply and their limits. Banks configure hundreds of fees across products, and a misconfigured fee repeats across many accounts. Examinations have led to orders to refund excess charges.

Dormant accounts and unclaimed balances. Banks must classify inactive accounts as dormant after set periods, notify customers, and follow rules on holding and eventually transferring unclaimed balances, while allowing customers to reclaim them.

Loan recovery across banks. A CBN framework allows lenders to recover defaulted loans from a borrower's accounts at other banks, under strict conditions, including the borrower's mandate given at the time of the loan. Recoveries without a valid basis cause serious complaints.

Complaints. CBN consumer protection rules set timelines for resolving complaints and escalation routes to the CBN.

Data. Identity, account and transaction data are personal data under the Nigeria Data Protection Act 2023.

Where do AI agents help?

Depth caps what an agent may do: 1 reads, 2 drafts for a person, 3 executes routine work within bounds.

1. Charge testing (depth 1). The agent recomputes charges applied to each account against the guide to charges and the product's agreed terms, and lists overcharges with amounts. This is the most Nigeria-specific use: the guide is explicit, the volume is high and the CBN examines it directly.
2. Dormant account testing (depth 1). The agent checks inactive accounts against each step: classification, customer notification, handling of balances and transfer timing. It lists accounts where a step was missed.
3. Recovery mandate checks (depth 1). For each cross-bank recovery, the agent checks that a valid borrower mandate exists in the loan file, that the loan was in default under the framework's conditions and that the amount did not exceed what was owed.
4. Complaint timeline tracking (depth 3). The agent tracks complaints against resolution deadlines and sends internal reminders to owners.
5. NDPA evidence (depth 2). The agent gathers privacy notices, consent records, access logs and processor contracts and drafts the compliance audit file.

What stays with people?

Refunds. The agent calculates overcharges. Deciding the remediation programme and crediting customers moves money, so a person approves and operations executes.

Recoveries. Initiating, reversing or stopping a cross-bank recovery affects a borrower's funds at another bank and must be decided by people. Where a recovery lacked a valid basis, the remedy is a decision with legal weight.

Reactivating or transferring dormant balances. Both involve customer funds and identity checks, decided by people.

Complaint outcomes and CBN responses. Whether a complaint is upheld, and what the bank tells the CBN, stays with the complaints unit and compliance.

Breach notification to the Commission, and what customers are told.

Which Nigerian rules apply?

Nigeria has no AI-specific law in force. Retail banks' agents are governed by banking regulation and data protection law. The broader picture is in how AI agents are regulated in Nigeria.

Central Bank of Nigeria. Licenses and supervises banks. Its rules on charges, consumer protection, complaint handling, dormant accounts, loan recovery across banks, KYC, AML and operational risk apply to every process an agent supports. The bank remains accountable for outcomes, whoever or whatever produced them.

Nigeria Data Protection Act 2023 and the Nigeria Data Protection Commission. Lawful basis, purpose limitation, data minimisation, security, individuals' rights, breach notification and conditions for transfers outside Nigeria. Banks process data at scale and carry registration and audit duties. See Nigeria Data Protection Act and AI agents.

SEC Nigeria regulates capital markets, relevant where banks distribute investment products.

FATF Recommendations shape Nigeria's AML framework for banks.

This is an explanation of the rules, not legal advice; confirm how they apply to you with counsel.

How should a Nigerian bank start?

Days 1 to 30. Start with charge testing on your highest-volume current and savings account products. Confirm where the agent's model processes data and record it in your NDPA documentation.

Days 31 to 60. Replay the agent against the period covered by your last CBN examination of charges. Every excess charge the examiners found should appear; treat any new ones as live issues.

Days 61 to 90. Run monthly on all retail products, with compliance reviewing results and operations correcting fee configurations. Add recovery mandate checks. Indian banks face a similar emphasis on disclosure and collections under a different regulator; see compliance agents in Indian retail banking.

Where Pryme fits

In Pryme, the charge testing agent reads fee configurations and account data at depth 1. Crediting a customer is a depth 4 action outside its role scope, so it is refused and the verdict names the bound that decided. Attest certifies it against your own past examination findings, and the certificate lapses after 90 days unless renewed. Every verdict is filed for the CBN. The guide to AI compliance agents explains the approach.