What Nigerian Banks Report: SCUML, NFIU, FIRS ✅
Nigerian banks and licensed fintechs are legally required to report large and suspicious transactions to the NFIU, SCUML and FIRS. This guide explains the ₦5m/₦10m CTR thresholds, the 24-hour STR rule and exactly which documents to keep on file.
What Nigerian banks report to the authorities is not a matter of discretion — it is a statutory obligation under the Money Laundering (Prevention and Prohibition) Act 2022. Banks, licensed fintech wallets and gambling operators are all obliged reporters, filing Currency Transaction Reports and Suspicious Transaction Reports to the Nigerian Financial Intelligence Unit through the goAML portal. A large transfer to an offshore betting platform can land squarely in that reporting net, and the April 2024 EFCC enforcement action — which froze over 105 accounts across nine fintechs as part of a wider 1,146-account order — demonstrated that payment-rail enforcement is active and routine. This guide explains who receives the reports (SCUML/EFCC, the NFIU, and FIRS/the Nigeria Revenue Service), which amounts and behaviours actually trigger a report, what happens when an account is flagged, and precisely which documents to keep on file so a legitimate transfer is never mistaken for money laundering.
Table of contents
- Do Nigerian banks report your transactions?
- Who the reports go to — SCUML, NFIU and FIRS
- What actually triggers a report
- What happens when an account is flagged — the April 2024 freeze
- How to document your Source of Funds and Source of Wealth
- Frequently asked questions
- Conclusion
Do Nigerian banks report your transactions? The short answer
Yes — and they do so automatically, not as a personal judgement against you. Under the Money Laundering (Prevention and Prohibition) Act 2022 (MLPPA), which entered into force on 12 May 2022, every financial institution in Nigeria is a mandatory reporting entity. Banks and licensed fintechs are obliged to file Currency Transaction Reports (CTRs) for large cash movements and Suspicious Transaction Reports (STRs) when activity looks unusual — regardless of the customer’s identity or stated purpose.
The reporting framework covers the entire payment ecosystem: commercial banks, microfinance banks, mobile money operators such as OPay, PalmPay, Moniepoint and Paga, and — critically for bettors — gambling operators themselves, which the MLPPA classifies as Designated Non-Financial Businesses and Professions (DNFBPs). Routine salary credits and normal household spending are not the target of this regime; large, unusual or structured movements are. However, funding an offshore betting account at scale fits the profile that automatic monitoring is designed to catch. For the full law and the obligations it places on operators, the neighbouring AML/SCUML legislation page covers the MLPPA in detail.
Who the reports go to — SCUML, NFIU and FIRS
Three bodies sit at the centre of Nigeria’s financial-intelligence architecture. Each receives a different piece of the reporting picture, and understanding what each does makes the system far less opaque.
SCUML — Special Control Unit Against Money Laundering
SCUML is a unit of the Economic and Financial Crimes Commission (EFCC). Its primary function is the registration, supervision and monitoring of Designated Non-Financial Businesses and Professions for AML/CFT compliance. Every gambling operator wishing to accept Nigerian players must hold a valid SCUML registration before commencing operations — SCUML is, in effect, the gatekeeper that brings the gambling sector inside the formal reporting perimeter. When SCUML registers an operator, it becomes the supervisory body that can inspect records, demand reports and refer cases to the EFCC for investigation. The reports that flow upward from DNFBPs, including casino operators, land with SCUML before any enforcement escalation.
NFIU — Nigerian Financial Intelligence Unit and goAML
The Nigerian Financial Intelligence Unit is Nigeria’s central financial-intelligence agency and the primary repository for transaction reports. Banks, fintechs and other obliged entities file both CTRs and STRs directly to the NFIU through the goAML portal at goaml.nfiu.gov.ng. The NFIU analyses these filings to identify patterns, builds intelligence packages and passes actionable leads to the EFCC, the Nigeria Police Force and other law-enforcement agencies. This is where a report from your bank actually lands — the NFIU is the analytical engine, not merely an inbox.
FIRS / Nigeria Revenue Service
The Federal Inland Revenue Service — re-styled the Nigeria Revenue Service (NRS) under the Nigeria Revenue Service (Establishment) Act 2025, in force from 1 January 2026 — is the federal tax authority. The NRS Act significantly expands the agency’s data-sharing and compliance-monitoring powers, giving it the legal basis to obtain bank and financial-account information for tax assessment purposes. In practical terms: what your bank sees and reports can feed a tax review. The bridge between “what got reported” and “what you may owe” runs through the NRS. For the step-by-step of declaring gambling winnings to FIRS, the how-to-declare-winnings guide covers that process in full.
What actually triggers a report
Concrete thresholds matter more than vague warnings. The table below summarises the main reporting triggers under the current framework.
| What | Threshold or trigger | Report type | To whom |
|---|---|---|---|
| Cash transaction — individual | ₦5,000,000 and above | Currency Transaction Report (CTR) | NFIU via goAML |
| Cash transaction — corporate | ₦10,000,000 and above | Currency Transaction Report (CTR) | NFIU via goAML |
| Anything that looks suspicious | Any amount, no minimum | Suspicious Transaction Report (STR) | NFIU — within 24 hours |
| Large or unusual fintech wallet outflow | Automatic system flag — no public fixed figure | Internal flag → possible STR | Wallet compliance team → NFIU |
| Cross-border cash — entering or leaving Nigeria | Above US$10,000 | Customs declaration | Nigeria Customs Service |
The ₦5m / ₦10m Currency Transaction Report
A single cash transaction at or above ₦5,000,000 for an individual — or ₦10,000,000 for a company — is filed as a routine CTR. This does not mean wrongdoing has been detected; it is simply a record that goes to the NFIU. The MLPPA 2022 also specifies that multiple linked cash transactions are aggregated against the threshold, so breaking one ₦7,000,000 withdrawal into three smaller amounts to stay below ₦5,000,000 is not only ineffective — the transactions are combined — but is itself a criminal offence known as structuring. The CTR filing window for institutions is seven days from the date of the transaction, but the amount thresholds are firm and non-negotiable.
For the average player making an occasional large deposit from salary savings, the CTR is an administrative formality; it becomes a problem only when the source of the funds cannot be established. A clean bank statement showing the money’s provenance — salary credits building over months, for example — resolves the question immediately.
Suspicious Transaction Reports and automatic fintech flags
An STR operates on an entirely different logic. There is no minimum amount; the trigger is the institution’s judgement that a transaction or pattern of behaviour looks unusual, inconsistent with the customer’s profile, or connected to money laundering or terrorism financing. Once that suspicion arises, the filing deadline is 24 hours — meaning the NFIU receives the intelligence almost in real time.
For fintech wallets — OPay, PalmPay, Moniepoint, Paga — large or atypical outflows are flagged automatically by the institution’s transaction-monitoring system before any human reviews the account. Offshore betting is a classic pattern that these systems are designed to catch: a wallet receives frequent, mid-sized inflows (salary, business payments) and then routes lump sums to a foreign platform. This profile does not prove wrongdoing, but it does generate an automatic alert. The institution’s compliance team reviews the flag, and if it cannot explain the pattern, an STR goes to the NFIU within 24 hours. The specific internal threshold at which a fintech’s algorithm triggers a flag is not publicly disclosed; the safe assumption is that any transfer that looks disproportionate to the account’s normal activity is at risk of a flag.
What happens when an account is flagged — the April 2024 freeze
Enforcement at the payment-rail level is real, and the April 2024 EFCC action provides the clearest recent evidence. Acting on Federal High Court orders — obtained on grounds of suspicious forex and crypto flows, money laundering and terrorism financing — the EFCC froze 105 accounts spread across nine fintechs as part of a wider operation that targeted 1,146 accounts. This was a broad AML/CFT enforcement sweep, not a betting-specific crackdown; the accounts were flagged for suspicious cross-border currency movements, and gambling platforms happened to be one of the destinations in some cases. It is important not to misread the action as evidence that bettors are being targeted — however, it demonstrates unambiguously that account-level enforcement operates at scale and speed.
The practical sequence when an account is flagged runs as follows: the institution places a “post-no-debit” restriction while it investigates, the compliance team or the EFCC issues a documentation request, the account-holder submits evidence of the transaction’s source, and the freeze is lifted once the source is verified as legitimate. A freeze is not a conviction and it is not necessarily linked to criminal activity; for the vast majority of individuals caught in this process, the resolution is simply producing the right paperwork. The documentation list in the next section is built precisely to make that process straightforward.
How to document your Source of Funds and Source of Wealth
The most reliable protection against a flag becoming a prolonged freeze is maintaining a clear, contemporaneous paper trail before moving large sums. The distinction between Source of Funds (the immediate origin of the specific money being transferred) and Source of Wealth (the broader story of how you accumulated your assets) matters when investigators ask questions. Both need documents.
The documents to keep on file
Assembling the following records before a large deposit to an offshore operator means that any query can be answered the same day it arrives:
- Pay slips or salary advice — three to six months of slips showing employer name, amount and payment date; these establish that the funds accumulated legitimately from employment income.
- Bank statements — covering at least three months, showing the deposit of salary or business income and the gradual build-up to the transfer amount; this proves the money did not arrive from an unexplained source.
- Business registration documents (CAC) — for self-employed individuals, a current Corporate Affairs Commission registration and business bank account statements showing trading income directly tied to the funds.
- Tax returns or tax-clearance certificate — confirming that income has been declared to the FIRS / Nigeria Revenue Service; this is particularly powerful when the sum is large relative to salary.
- Sale receipts or contracts for one-off sums — if the money came from an asset sale (a property, a vehicle, equity in a business), the sale agreement and proof of proceeds are the critical documents.
- Operator payout confirmations — if part of the funds represents gambling winnings from a previous deposit, retain the platform’s withdrawal confirmation; this closes the loop cleanly.
Each document performs a specific function: it answers the question “where did this money come from?” at a different stage of the paper trail. Together they form a chain of custody that a compliance officer or EFCC investigator can follow without needing to make any inference.
Practical habits before a large deposit
Beyond holding the documents, three behavioural habits reduce the probability of triggering a flag in the first place. First, move funds from the account that demonstrably received the income — routing money through two or three intermediary accounts before a deposit adds suspicious pattern noise without adding any value. Second, never split a large intended transfer into multiple smaller transfers to stay below the ₦5,000,000 CTR threshold; as noted above, the MLPPA aggregates linked transactions and structuring is a criminal offence in its own right. Third, if you use USDT or another cryptocurrency to fund an offshore platform, be aware that crypto-denominated cross-border flows draw heightened CBN and EFCC scrutiny — this is one of the most-flagged offshore-betting patterns in the current enforcement environment — and the documentation bar for crypto transfers is correspondingly higher.
Keeping records is not complicated; the discipline is simply doing it before the transfer, not after the account is frozen.
Frequently asked questions
Conclusion
What Nigerian banks report is defined by statute, not discretion: Currency Transaction Reports at ₦5,000,000 for individuals (₦10,000,000 for companies) are filed to the NFIU via goAML within seven days; Suspicious Transaction Reports — which carry no minimum amount — must be filed within 24 hours of suspicion arising; and large or unusual fintech wallet outflows feeding offshore platforms are flagged automatically and reviewed in near real time. All of this operates under SCUML/EFCC supervision, with the Nigeria Revenue Service holding the legal authority to access bank data for tax assessment. The April 2024 freeze of 105+ accounts across nine fintechs demonstrated, conclusively, that payment-rail enforcement is active and is not a theoretical concern. The protection against a legitimate transfer being misconstrued is a clean Source-of-Funds paper trail — pay slips, bank statements, CAC documents, tax returns and operator payout confirmations — assembled before the transfer is made. Never structure transfers to stay under the threshold; document everything transparently; and play responsibly.
18+. Play Responsibly. If gambling is causing harm, contact the Gamble Alert helpline: +234 916 295 7989 or visit gamblealert.org.