D1 Sanctions
Sanctions is not yet covered for this jurisdiction in this report.
Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.
Nigeria's AML/CFT/CPF regime rests on the Money Laundering (Prohibition) Act 2011 (as amended), NFIU Act 2018, Terrorism Prevention Act, and CAMA 2020 BO framework, supervised by CBN, SEC and NAICOM with EFCC/NFIU as lead enforcement/FIU bodies.
Sanctions is not yet covered for this jurisdiction in this report.
In Nigeria, the directly relevant beneficial-ownership development this cycle is domestic and sector-specific: the Central Bank of Nigeria's circular dated 15 June 2026 requires banks, payment service banks, mobile-money operators, switches and super-agents to disclose ultimate beneficial owners of significant shareholders and to maintain continuously updated ownership records. This closes a transparency gap of the kind previously flagged in Nigeria's FATF listing history and is framed by the CBN as an AML-alignment measure. Corroborating this reading, Nigeria's sustained exit from the FATF grey list, confirmed off the 22-jurisdiction list as of the 19 June 2026 plenary after an October 2025 delisting, sits alongside this new BO-disclosure architecture as part of the same broader transparency-strengthening trajectory the FATF action plan required.
Globally, the EU AML Package, comprising the AML Regulation (Reg (EU) 2024/1624, directly applicable), the sixth AML Directive transposed per Member State, and the AMLA Regulation (Reg (EU) 2024/1620) establishing the Anti-Money Laundering Authority, sets the structural direction for beneficial-ownership transparency and is shifting supervision from purely national authorities toward a hybrid EU-level regime. Nigeria sits outside this EU perimeter entirely; the AMLA architecture is durable global backdrop here, not the primary subject matter for a Nigerian reading. In Nigeria, the directly relevant development is the CBN's own domestic disclosure mandate, layered onto standing VASP financial-institution designation under the Money Laundering (Prevention and Prohibition) Act 2022, which already brings virtual asset service providers within SCUML and EFCC AML/CFT supervision as beneficial-ownership-relevant reporting entities.
No primary CBN circular text was directly retrieved this cycle for the UBO-disclosure measure; the finding rests on corroborated trade-press reporting rather than the regulator's own published text, a gap that should be resolved with primary CBN documentation in a future cycle.
The practical test for Nigeria's new UBO-disclosure regime will be whether the continuously-updated-ownership-record requirement is enforced through the CBN's supervisory examination cycle, and whether it is cross-referenced by the EFCC in future corporate-entity prosecutions of the kind already underway against firms such as Cresco Oil and Gas Ltd. Retrieval of the primary CBN circular text remains an outstanding priority for confirming the precise scope of covered entities and the compliance timeline.
Enabler Jurisdictions is not yet covered for this jurisdiction in this report.
Conflict Finance is not yet covered for this jurisdiction in this report.
Nigeria's digital-asset regulatory architecture advanced this cycle through the Presidential Executive Order on Virtual Assets Coordination, signed by President Tinubu on 17 July 2026, which establishes a Virtual Asset Council to coordinate the overlapping mandates of the Securities and Exchange Commission, the Central Bank of Nigeria and other authorities over crypto activity. The Order is a coordination mechanism, not a new substantive licensing rulebook, and is presented as a response to a fragmented regulatory landscape that had previously exposed Nigerian residents to unchecked losses from unregulated operators.
This sits within a standing regulatory-perimeter fact directly relevant to financial-integrity supervision: virtual asset service providers are designated as financial institutions under the Money Laundering (Prevention and Prohibition) Act 2022, which brings them within the AML/CFT supervisory reach of SCUML and the EFCC. The Virtual Asset Council's coordinating role therefore operates on top of, rather than replacing, this existing AML/CFT designation.
Globally, FATF's virtual-asset standards and instruments such as MiCA provide structural backdrop for crypto-integrity regulation, but for Nigeria the directly relevant story is domestic: the Executive Order's coordination architecture, layered onto the CBN's continuing sandbox activity for VASP-track digital-asset firms, and the SEC's own rule-making trajectory in this space. The overlapping-mandate problem the Order is designed to solve is itself a financial-integrity signal: a fragmented supervisory landscape is precisely the condition in which illicit-finance risk in crypto activity tends to go undetected, so the coordination mechanism should be read as an architecture-level risk-mitigation step rather than an incident response.
Whether the Virtual Asset Council produces a genuinely consolidated AML/CFT rulebook for virtual asset service providers, or remains a coordination layer atop the SEC's and CBN's separately-exercised powers, is the key open question for this domain. Continued monitoring of SEC rule-making activity and any CBN sandbox-track developments affecting VASPs will clarify whether Nigeria's crypto AML/CFT perimeter is converging toward a single supervisory voice.
Real-time AML transaction monitoring became mandatory for Nigerian fintechs in 2026, with the Central Bank of Nigeria's mandate carrying an audit-backed enforcement rollout timeline. This represents a meaningful architecture-level shift in compliance-technology expectations: rather than relying on periodic or manual transaction review, regulated fintechs are now expected to operate continuous, real-time monitoring capability.
The finding, however, carries only uncertain confidence, and for a structural reason worth foregrounding rather than glossing over: a documented gap exists between this new supervisory expectation and the industry's current AI/ML-based monitoring maturity. A mandate that outpaces the compliance-technology capacity of the regulated population is itself an analytically significant signal, distinct from the mandate's mere existence. Enablement-as-signal reasoning applies directly here: the absence, so far, of confirmed enforcement action under this mandate may reflect either a grace period built into the rollout timeline, or a genuine capacity shortfall across the fintech sector that supervisors have not yet chosen to test through enforcement.
This compliance-technology development sits alongside, and is reinforced by, the CBN's payments-data-localisation requirement, under which Nigeria-originated payments transaction data must be stored and managed within Nigeria, with compliance required by 31 December 2026. Read together, the two measures point toward a domestic supervisory infrastructure build-out: real-time monitoring capability paired with domestically-retained transaction data creates the technical precondition for more effective domestic AML surveillance, whatever the current maturity gap.
The audit-backed enforcement rollout timeline for the real-time monitoring mandate is the concrete date to track: whether CBN audits translate the maturity gap into enforcement action, or whether the timeline is extended, will determine whether this becomes a genuine compliance-technology uplift or a nominal requirement. The data-localisation deadline of 31 December 2026 is a second concrete date against which to test whether the domestic-data precondition for effective monitoring has actually been met.
Nigeria's AML/CTF regime this cycle is defined by the durability of its FATF grey-list exit. Nigeria was removed from the list at the 24 October 2025 plenary after completing a 19-point action plan, and it remained off the 22-jurisdiction list as of the 19 June 2026 plenary, with the next plenary scheduled for October 2026. Sustaining delisted status across three consecutive plenaries is a structural signal distinct from the initial delisting event: it indicates the underlying reforms behind the action plan are being maintained rather than reversed.
The Economic and Financial Crimes Commission's enforcement activity is credited as a contributor to the sustained delisting, and its 2026 prosecution record shows continuity: at least ten corporate entities, including Cresco Oil and Gas Ltd and Abu-Haneefa Oil and Gas Ltd, are being prosecuted for fraud and money-laundering offences totalling several billion naira. This reflects a shift toward pursuing corporate entities and executives directly rather than politically exposed persons alone, a pattern consistent with maturing AML/CTF enforcement architecture rather than isolated incident response.
Virtual asset service providers remain designated as financial institutions under the Money Laundering (Prevention and Prohibition) Act 2022, placing them within SCUML and EFCC AML/CFT supervision as a standing regulatory-perimeter fact. This designation is what allows the Virtual Asset Council's coordination architecture (established by the July 2026 Executive Order) to operate within an existing AML/CFT supervisory framework rather than a regulatory vacuum. The EU AML Package (AMLR, 6AMLD, AMLA Regulation) is not directly binding on Nigeria as a non-EEA jurisdiction, and no interaction was identified this cycle.
The October 2026 FATF plenary is the immediate date to watch: a third consecutive grey-list-free outcome would further confirm that Nigeria's 19-point action plan reforms have taken durable hold rather than representing a temporary compliance push ahead of review. Continued EFCC corporate-prosecution volume will be a useful indicator of whether enforcement intensity, credited as contributing to the original delisting, is being sustained.
Commercial Activity is not yet covered for this jurisdiction in this report.
The CBN's 15 June 2026 UBO-disclosure circular for banks, PSBs, mobile-money operators, switches and super-agents creates a new ownership-transparency data point relevant to customer due diligence, while Nigeria's sustained grey-list exit through the June 2026 FATF plenary reduces the enhanced-due-diligence trigger previously associated with Nigerian counterparties under a call-for-action or increased-monitoring designation.
Compliance functions with Nigerian exposure face three concurrent obligations this cycle: UBO-disclosure record-keeping for significant shareholders, data-localisation of Nigeria-originated payments data by 31 December 2026, and mandatory real-time transaction monitoring with an audit-backed rollout timeline that outpaces documented industry monitoring maturity.
The 17 July 2026 Executive Order establishes a coordinating body without displacing SEC's or CBN's existing statutory powers over virtual assets, meaning legal exposure analysis must still track both regulators' separate rule-making rather than relying on a single consolidated authority.
Sustained grey-list-free status since October 2025, confirmed again in June 2026, reduces reputational and correspondent-banking friction previously associated with Nigerian counterparty exposure, though this should be weighed against emerging compliance-cost increases from new CBN mandates.
CBN's real-time transaction-monitoring mandate and the data-localisation requirement (compliance by 31 December 2026) together imply that Nigeria-facing payments infrastructure must support both domestic data residency and continuous AML/CFT monitoring capability, an area where documented industry maturity currently lags supervisory expectation.
The mandate's audit-backed enforcement timeline creates near-term exposure for firms whose transaction-monitoring technology has not kept pace with the regulatory expectation, a risk that compounds with the new UBO-disclosure and data-localisation obligations landing in the same period.
No material change for this persona this cycle
The EFCC's prosecution of at least ten corporate entities in 2026, alongside new UBO-disclosure and real-time-monitoring requirements, means audit trails for Nigerian counterparties now require testing against a wider set of controls than in prior cycles.
Nigeria's sustained FATF delisting and new CBN UBO-disclosure mandate both bear directly on suspicious-activity reporting posture.
New CBN UBO-disclosure, data-localisation and real-time-monitoring mandates each carry distinct compliance-framework implications.
The Virtual Asset Council's coordination architecture clarifies, but does not yet resolve, overlapping SEC/CBN crypto jurisdiction in Nigeria.
Nigeria's sustained FATF delisting through three plenaries is a materially favourable jurisdiction-risk signal for institutional exposure decisions.
Real-time AML monitoring and payments-data-localisation mandates require technical infrastructure investment ahead of 2026-2027 deadlines.
A documented gap between real-time-monitoring mandate and industry AI/ML maturity is an emerging model-risk and compliance-gap signal.
No material change for this persona this cycle.
EFCC's expanding corporate-prosecution volume and new CBN mandates both expand the evidentiary and control-testing scope for Nigerian exposure.
Illustrative scenario for analytical orientation only: as the EU's AMLA moves toward direct and indirect supervision of cross-border obliged entities under the AMLA Regulation, alongside the directly-applicable AMLR and per-state 6AMLD transposition, non-EEA jurisdictions such as Nigeria could see indirect effects through correspondent-banking de-risking pressure or through EU-domiciled counterparties applying stricter enhanced-due-diligence standards to Nigerian-linked beneficial-ownership structures, even though Nigeria itself sits outside the AMLA supervisory perimeter. This is architecture-over-incident framing: the shift in EU supervisory structure, not any single enforcement event, is the mechanism illustrated.
Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.
| Tracker | Status | Note |
|---|---|---|
| T1 · Russian Sanctions-Evasion Architecture | no_change | No material change identified this cycle in Russian sanctions-evasion architecture as it pertains to or transits Nigeria. |
| T2 · EU AML Package / AMLA | no_change | Not applicable as a binding regime for NG (non-EEA, autonomous jurisdiction); no AMLR/6AMLD/AMLA development affects Nigeria directly this cycle. |
| T3 · FATF Grey List | watch | Nigeria remains off the FATF grey list (exited 24 October 2025) but EFCC/NFIU ran a joint readiness stocktake ahead of the 2027 Mutual Evaluation. |
| T4 · Beneficial-Ownership Register Status | watch | CAC's Beneficial Ownership Register is operational, but CAC itself now acknowledges three fragmented BO systems (CAC/NEPZA/NEITI) and is pushing harmonisation. |
| T5 · Crypto & Digital-Asset Integrity | watch | SEC's Proposed Rules on Digital and Virtual Asset Operations remain under post-consultation review; concurrently EFCC obtained BOFIA convictions against 21 unlicensed operators. |
| T6 · Sanctions Regime Divergence | no_change | No NG-specific sanctions-divergence development was identified this cycle. |