🚨 Regulatory AlertDeep DiveApril 27, 2026 · ~18 min read

CBN Circular BSD/DIR/PUB/LAB/019/002:
The 2026 AML Baseline Standards, Complete Analysis

On March 10, 2026, the Central Bank of Nigeria issued Circular BSD/DIR/PUB/LAB/019/002, the most significant AML regulatory development in Nigeria in a decade. This is the definitive analysis of what it requires, who it applies to, and exactly what your institution must deploy.

Quick Summary: What the Circular Requires

  • ✓Automated real-time transaction monitoring across ALL channels
  • ✓AI-powered risk scoring (not just rule-based thresholds)
  • ✓Automated STR filing via goAML within 24 hours
  • ✓Continuous PEP and sanctions screening
  • ✓Beneficial ownership identification and UBO verification
  • ✓Written implementation roadmap submitted to CBN by June 10, 2026

🚨 Key Dates

March 10, 2026

Circular Issued

CBN formally issued BSD/DIR/PUB/LAB/019/002

June 10, 2026

Roadmap Deadline

Submit implementation roadmap to CBN Director, Banking Supervision

Sept 2027

Full Deployment

18-month window for complete system deployment

Who Does the Circular Apply To?

The CBN circular applies to all institutions regulated by the Central Bank of Nigeria. This is not limited to commercial banks, it covers the full spectrum of licensed financial institutions:

→Commercial Banks (Tier 1, 2, and 3)
→Merchant Banks
→Microfinance Banks (MFBs)
→Payment Service Banks (PSBs)
→Finance Companies
→Mobile Money Operators (MMOs)
→Fintechs holding CBN licences
→Mortgage Banks
→Development Finance Institutions (DFIs)
→Virtual Asset Service Providers (VASPs) under CBN oversight

The 7 Core Mandates of the Circular

Mandate 1Automated Real-Time Transaction Monitoring

All regulated institutions must maintain an automated system that screens 100% of transactions in real time across all channels, including NIP, NIBSS, internet banking, mobile, USSD, ATM, POS, and agent banking. Manual-only monitoring is no longer acceptable.

Mandate 2AI-Powered Risk Scoring Engine

The CBN specifically mandates AI or machine learning-based risk scoring, not solely rules-based threshold triggers. Institutions must demonstrate that their system learns from behavioural baselines and adapts to emerging typologies.

Mandate 3Automated STR/CTR Filing via goAML

The circular requires automated generation and submission of Suspicious Transaction Reports within 24 hours of detection and Currency Transaction Reports for cash ≥ ₦5M (individuals) / ₦10M (corporates) to the NFIU via the goAML web services API.

Mandate 4Continuous PEP & Sanctions Screening

Real-time screening at onboarding plus ongoing daily rescreening of the entire customer base against OFAC, UN, EU, OFAC CAATSA, and NFIU domestic sanctions lists. Triggered rescreening on list updates.

Mandate 5Beneficial Ownership Identification

Automated beneficial ownership capture and verification for all legal entity customers, with UBO chain tracking to the natural person level. UBOs must be screened against PEP and sanctions lists.

Mandate 6Documented Governance & MLRO Function

Board-approved AML/CFT policy, designated MLRO with documented mandate and direct board access, annual compliance training programme, and an independent audit of the AML programme at least annually.

Mandate 7Implementation Roadmap Submission

Each institution must submit a written implementation roadmap to the CBN Director of Banking Supervision by June 10, 2026, including current-state assessment, vendor selection, deployment timeline, and resource plan.

What Must the Implementation Roadmap Include?

The CBN requires every regulated institution to submit a formal implementation roadmap by June 10, 2026. Based on CBN examination expectations, the roadmap should contain:

01

Current-State AML Maturity Assessment

Document your existing AML controls, technology gaps, and compliance posture against each of the 7 mandates.

02

Vendor Selection & Technology Architecture

Identify the AML technology vendor and provide evidence of their capability to meet CBN Baseline Standards.

03

Implementation Timeline

Month-by-month deployment plan from contract execution through to go-live, UAT, and post-go-live stabilisation.

04

Governance Appointments

Confirm MLRO appointment (or selection timeline), board AML committee structure, and training plan.

05

Resource & Budget Allocation

Demonstrate board-approved budget and internal resource allocation for the implementation programme.

06

Risk Management Plan

Identify implementation risks (data quality, integration complexity, staff capacity) and mitigation strategies.

💡 AI Shield Nexus Tip

AI Shield Nexus provides a pre-built CBN Implementation Roadmap Template that maps our platform capabilities directly to each mandate in the circular. We can also provide a letter of intent and technical specifications to satisfy the CBN roadmap submission requirements. Book a demo to get your roadmap documentation.

Penalties for Non-Compliance

ViolationPenalty
No automated monitoring systemUp to ₦10M administrative fine + regulatory restriction
Late or missing STR filingsUp to ₦10M per missed STR + potential criminal referral
Incomplete KYC/CDD recordsPer-account fine + mandatory remediation programme
Failure to submit implementation roadmapShow-cause notice + enhanced CBN supervision
Repeated non-compliance post-noticeLicence suspension, restrictions, or revocation proceedings

Source: Money Laundering (Prevention and Prohibition) Act 2022; CBN AML/CFT/CPF Regulations 2022; CBN examination practice.

Need to comply with CBN Circular BSD/DIR/PUB/LAB/019/002?

AI Shield Nexus maps directly to all 7 mandates of the CBN March 2026 circular. We provide the technology, implementation roadmap documentation, and CBN examiner-ready evidence pack, deployable in weeks.

Frequently Asked Questions

What is CBN Circular BSD/DIR/PUB/LAB/019/002?

CBN Circular BSD/DIR/PUB/LAB/019/002, issued March 10, 2026, mandates that all CBN-regulated financial institutions deploy automated AML solutions meeting the CBN Baseline Standards. Institutions must submit implementation roadmaps to the CBN Director of Banking Supervision by June 10, 2026.

Does the circular apply to microfinance banks?

Yes. The circular applies to all CBN-licensed institutions including commercial banks, merchant banks, microfinance banks, payment service banks, mobile money operators, fintechs, and VASPs. There is no carve-out for smaller institutions.

What happens if we miss the June 2026 roadmap deadline?

Institutions that fail to submit an implementation roadmap by June 10, 2026 face CBN show-cause notices, enhanced supervision, potential administrative sanctions, and reputational risk from public enforcement actions.

Can we use our existing core banking system for AML monitoring?

Generally no. Standard core banking systems (Finacle, Flexcube, Temenos) do not include AI-powered AML monitoring that meets CBN Baseline Standards. A dedicated AML platform integrated with your core banking system is required.

How quickly can AI Shield Nexus deploy to meet the CBN deadline?

AI Shield Nexus has a rapid deployment model. A standard deployment, including integration, configuration, data migration, UAT, and go-live, typically takes 6–10 weeks for most institutions, well within the CBN's required timeline.