Suspicious Activity Reports (SARs) in Nigerian Banking: Q&A for 2026

In 2026, the Central Bank of Nigeria (CBN) and the Nigerian Financial Intelligence Unit (NFIU) operate under strict, automated anti-money laundering mandates. Per the CBN’s Baseline Standards for Automated AML Solutions issued in March 2026, manual compliance tracking has been phased out.

Nigerian banks now utilize real-time AI transaction monitoring to flag risk profiles instantly, requiring businesses to maintain absolute transparency to keep their accounts active.

Frequently Asked Questions

1. What exactly triggers a Suspicious Activity Report (SAR) in 2026?

A SAR (or Suspicious Transaction Report – STR) is automatically triggered whenever an automated AML system flags activity that deviates from a customer’s established operational baseline. Common high-risk triggers include:

• Structuring or “Smurfing”: Breaking a large transaction (such as ₦50 million) down into multiple ₦2 million or ₦3 million transfers over a short period to stay under regulatory cash limits.

• Rapid Fund Velocity (“In-and-Out”): Receiving massive inflows and immediately transferring them out within minutes, suggesting the account is being used as a money laundering conduit.

• Ultimate Beneficial Ownership (UBO) Mismatch: Routing payments to or from an entity whose underlying owners or directors match individuals on domestic or international watchlists.

2. What are the cash transaction reporting limits for 2026?

Under current NFIU guidelines, financial institutions are mandated to file a Currency Transaction Report (CTR) within 24 hours for any single or linked cash transaction that hits or exceeds:

• Individuals: ₦5,000,000

• Corporates: ₦10,000,000

3. Will my bank tell me if they are filing a SAR against my account?

No. Under the Money Laundering Prevention and Prohibition Act (MLPPA), banks are strictly prohibited from informing a client that an investigation is underway. This is known as the “Anti-Tipping Off” rule. If an analyst files a report with the NFIU, the first indicator your business will receive is an automated administrative freeze on the account.

4. How fast must banks report suspicious activity to the NFIU?

The 2026 guidelines give financial institutions an aggressive 24-hour window from the moment suspicion is formed to submit an STR/SAR to the NFIU portal. Because systems are automated, any transaction flagged by the AI goes immediately to an internal compliance desk for rapid human verification.

5. Who falls under “Enhanced Due Diligence” (EDD)?

Enhanced Due Diligence requires manual review and senior management sign-offs for individuals or entities with naturally high financial risk profiles. This includes:

• Politically Exposed Persons (PEPs): Both international and domestic public officials, along with their close family members and business associates.

• High-Risk Sectors: High-volume digital fintech apps, cryptocurrency-adjacent structures, cross-border remittance providers, and major real-estate brokerages.

6. What role does a SCUML certificate play in stopping an account freeze?

If your business is classified as a Designated Non-Financial Business and Profession (DNFBP)—such as real estate, luxury goods, law firms, or car dealerships—you must hold an active SCUML (Special Control Unit Against Money Laundering) certificate. If you attempt a large transaction (e.g., a ₦100 million property purchase payment) without a linked SCUML registration, the bank’s AI will flag it as an unvetted DNFBP risk and freeze the funds automatically.

7. How can a legitimate business prevent false positive AI triggers?

• Keep KYC/KYB Dynamic: Do not let your account records go stale. If your business shifts from a ₦10 million monthly volume to a ₦100 million monthly volume due to a new contract, update your corporate risk profile with your bank’s relationship manager beforehand.

• Pre-Clear Large Transactions: Keep a clear “Transaction Logic” folder. If you are expecting a massive capital injection or executing a major asset sale, provide your bank’s compliance team with the underlying contracts before the funds hit your account.

Pro-Tip: The June 10, 2026 Deadline

By June 10, 2026, all Nigerian financial institutions and licensed payment providers are legally required to submit their finalized Automated AML Implementation Roadmaps to the CBN. Expect banks to be hyper-vigilant and risk-averse over the coming months as they clean up older account data to satisfy these strict technical audits. Ensure all your corporate directors have verified, matching Bank Verification Numbers (BVN) and National Identification Numbers (NIN) linked to your business profile to prevent automated system flags.