Skip to main content


      Source and interpretation note:

       

      This article is based on KPMG’s interpretation of the Central Bank of Nigeria’s Baseline Standards for Automated Anti-Money Laundering, Combating the Financing of Terrorism and Countering Proliferation Financing Solutions, issued on 10 March 2026. Readers should refer to the official CBN publication for the full regulatory text and detailed compliance obligations.

       



      Background

      The Central Bank of Nigeria’s (CBN) Baseline Standards for Automated Anti-Money Laundering, Combating the Financing of Terrorism and Countering Proliferation Financing (AML/CFT/CPF) Solutions (“the Standards”), issued on 10 March 2026, introduce a significant development in the evolution of financial crime compliance in Nigeria’s financial services sector. In KPMG’s view, the Standards go beyond a narrow technology requirement and point to a broader supervisory expectation that financial institutions should manage financial crime risk through more structured, automated and evidence-based control environments. Viewed through this lens, the Standards represent an important regulatory technology reform. They indicate a movement away from heavily manual, fragmented and reactive approaches to financial crime compliance towards operating models that are more automated, integrated, risk-based and capable of producing demonstrable compliance outcomes.

      For financial institutions, this raises the minimum level of capability expected to support an effective AML/CFT/CPF programme. This shift reflects broader global trends. Across leading financial centers, regulators increasingly expect financial institutions to leverage Artificial Intelligence (AI), Machine Learning (ML), advanced analytics and real-time data processing capabilities to strengthen their ability to identify, assess and respond to evolving financial crime threats. These technologies are transforming how institutions conduct customer due diligence, perform sanctions and politically exposed person (PEP) screening, monitor transactions, identify suspicious activities and fulfil regulatory reporting obligations. The Standards align Nigeria with this international direction of travel and underscore the regulator’s determination to enhance the resilience, transparency and integrity of the country’s financial system.

      Strategically, the Standards should not be viewed as a technology initiative or a compliance exercise alone. Rather, they represent a fundamental transformation of the AML/CFT/CPF operating model. By mandating the deployment of automated solutions supported by AI, ML and advanced analytics, the CBN is placing increased emphasis on data quality, system interoperability, risk intelligence, governance effectiveness and demonstrable compliance outcomes. At their core, financial institutions will be expected not only to implement technology solutions but also to validate their effectiveness and demonstrate that they are producing meaningful risk management and regulatory compliance outcomes.

      Consequently, the implementation of the Standards will require institutions to look beyond technology procurement and undertake a broader program of transformation encompassing governance, data management, operating model redesign, workforce capabilities, third-party risk management and compliance effectiveness. For boards and senior executives, the key question is no longer whether to automate AML processes, but whether their institution possesses the technological maturity, data infrastructure and governance framework necessary to meet a new generation of regulatory expectations.




      Key Regulatory Milestones: Why Time Is Already Running

      With the roadmap submission deadline of 10 June 2026 now elapsed, the implementation phase has commenced. The focus for financial institutions should no longer be planning, but execution, integration, testing, validation and demonstrating effectiveness.

      Deployment Deadline for DMBs – 10 September 2027

      DMBs are required to complete the deployment, integration, and testing of AML/CFT/CPF solutions in line with the Standards within an 18-month implementation period.

      Deployment Deadline for OFIs – 10 March 2028

      OFIs are required to complete the deployment, integration, and testing of AML/CFT/CPF solutions within a 24-month implementation period. At first glance, these timelines may appear generous. However, institutions that view compliance as a technology procurement exercise risk underestimating the scale of transformation required. Experience from AML maturity assessments and financial crime transformation programs across the industry suggests that the greatest implementation challenge is often not the acquisition of a solution but ensuring that the solution operates effectively within the broader enterprise ecosystem.



      Institutions that focus solely on technology deployment may achieve implementation milestones but struggle to demonstrate the effectiveness, governance and integration required to satisfy regulatory expectations. Conversely, institutions that approach implementation as an enterprise-wide transformation initiative will be better positioned to achieve sustainable compliance and improved financial crime risk management outcomes.


      CBN Automated AML Solutions Baseline Standards

      CBN Automated AML Solutions Baseline Standards

      A New Era of Financial Crime Compliance in Nigeria


      Our people

      Saheed Olawuyi

      Partner & Head, Forensic

      KPMG in Nigeria

      Oluwaseun Odeku

      Partner & Lead, Regulatory Compliance, Forensic

      KPMG in Nigeria