CBN Issues New Anti-Money Laundering Rules for Banks and Fintechs in Nigeria

CBN Issues New Anti-Money Laundering Rules for Banks and Fintechs in Nigeria

The Central Bank of Nigeria (CBN) has intensified its fight against money laundering by issuing comprehensive new rules for banks and fintech firms, effective primarily from January 2026. These regulations aim to modernize anti-money laundering (AML) and counter-terrorism financing (CTF) frameworks amid rising digital transactions and sophisticated financial crimes. Building on prior efforts like 2025 fines totaling N15 billion on 29 deposit money banks (DMBs) for AML breaches, the CBN demands total governance overhauls and tech-driven compliance.

This push aligns with Nigeria’s evolving financial ecosystem, where fintech giants like OPay, Moniepoint, and PalmPay handle massive informal cash flows. Previously burdened by deposit penalties, agents now benefit from lifted cumulative cash deposit limits, but face unified weekly withdrawal caps of N500,000 for individuals and N5 million for corporates across all channels. The rules emphasize retaining cash in formal systems while curbing fraud vulnerabilities.

Key Regulatory Changes Unveiled

CBN’s December 2025 circulars mark a pivotal shift, reversing earlier cash restrictions and introducing fraud liability reforms. Agency banking networks, acting as de facto ATMs for millions, gain relief from excess deposit fees, eliminating daily collection anxieties. However, exemptions for embassies and donor agencies are scrapped, subjecting them to SME-level withdrawal limits.

A standout innovation is the May 2025 draft on AI and machine learning (ML) for AML, titled BSD/DIR/CON/AML/018/033. It mandates automated suspicious activity monitoring and reporting, giving institutions 12 months to comply. This addresses the complexity of Nigeria’s digital boom, where transaction volumes strain manual oversight. Banks must now shoulder liability for Authorised Push Payment (APP) fraud, dismantling old defenses that transactions were “authorized” via social engineering.

In September 2025, CBN launched a dedicated financial crime unit for real-time screening against global sanctions lists. It enforces 24-hour suspicious activity reports to the Nigerian Financial Intelligence Unit (NFIU), per the Money Laundering Prevention and Prohibition Act (MLPPA) and Terrorism Prevention & Prohibition Act (TPPA). Additional mandates include dual connectivity to NIBSS and UPSL for PoS routing, with 24-hour downtime reporting, and multi-factor authentication (MFA) for foreign card transactions over $200.

Regulation AspectKey ChangesEffective DateImpacted Entities
Cash DepositsUnlimited without penalties; prior limits liftedJan 1, 2026Banks, Fintechs, Agents (e.g., Moniepoint, OPay) 
WithdrawalsN500k individual/N5M corporate weekly cap, all channelsJan 1, 2026All DMBs, PSBs 
APP FraudBanks liable for social engineering scamsEarly 2026Payment Service Providers 
AI/ML AMLMandatory automated monitoring/reportingMay 2026 (12 months from draft)All regulated institutions 
Sanctions ScreeningReal-time checks, 24-hr NFIU reportsOngoing from Sep 2025Banks, OFIs 

Integration with Broader 2026 Fintech Strategy

These AML rules dovetail into CBN’s February 2026 Fintech Report, the first post-2022 Payment Systems Vision review. It advocates coordinated regulation, simplified licensing, and open banking rollout—initially delayed from August 2025 but live in early 2026 with standardized APIs for licensed entities only. Unlicensed startups must partner with supervised firms, balancing inclusion with stability.

October 2025 agent banking guidelines introduce exclusivity clauses effective April 2026, restricting super-agents from multi-operator ties. The Federal Competition and Consumer Protection Commission (FCCPC) now oversees interest rates, demanding 90-day audits and 48-hour document submissions. CBN Governor Dr. Yemi Cardoso, speaking at the 59th Annual Bankers’ Dinner, stressed structural reforms to avert economic sabotage amid N6.2 trillion FX losses.

The 2026 Fintech Strategy’s “Ten Priority Policy Options” promote “productive finance” for informal sectors via credit and savings tools, alongside regional passporting pilots. This holistic approach counters 2025’s 13 major regulations, from agent exclusivity to open banking approvals, which reshaped digital finance.

Industry Reactions and Challenges Ahead

Fintech founders view 2026 as tougher than 2025’s “migraine,” with compliance costs rising amid recapitalization pressures. While cash policy relief aids inclusion, unified withdrawal limits and fraud liabilities demand robust tech upgrades. Compliance officers highlight “regulatory noise,” urging actionable breakdowns for PSSPs, acquirers, and banks.

Critics note potential innovation stifling, as unlicensed players face barriers. Yet, CBN posits safer systems via AI-driven detection and real-time oversight. Historical precedents, like 2022 OFI AML guidance for microfinance banks, underscore ongoing evolution. As Nigeria braces for digital maturation, the rules aim to restore investor confidence and shield against global threats.

Implications for Compliance and Enforcement

Institutions face scrutiny via comprehensive governance audits by end-2025. Non-compliance risks sanctions, echoing 2025’s N15 billion penalties. The new unit bolsters digital solutions against evolving threats, ensuring MLPPA/TPPA adherence.

For fintechs, mandatory contactless options and foreign card MFA add layers, while open banking promises data-driven growth—if navigated correctly. Analysts predict a resilient ecosystem, but warn of absorption challenges without stifling Nigeria’s fintech boom.