Direct Answer
KYC is a subset of AML, not a replacement for it. KYC verifies who a customer is at onboarding. AML is the ongoing programme of transaction monitoring, suspicious activity detection, and regulatory reporting that the CBN requires throughout the customer relationship. A bank with strong KYC but no transaction monitoring is still non-compliant.
One of the most common misunderstandings in Nigerian banking compliance is treating KYC (Know Your Customer) and AML (Anti-Money Laundering) as interchangeable. They are not, and the confusion costs institutions dearly in CBN enforcement actions.
KYC (Know Your Customer) is the process of verifying a customer's identity, understanding the nature of their business, and assessing their risk level, primarily at the point of onboarding, and periodically thereafter. In Nigeria, KYC obligations are defined by the CBN's tiered account framework and the AML/CFT/CPF Regulations 2022.
AML (Anti-Money Laundering) is the complete programme of policies, controls, and procedures a Nigerian bank must maintain to detect, prevent, and report money laundering. It is defined by the NFIU, CBN, and FATF Recommendations. KYC is one component of AML, but an AML programme is far broader.
| Aspect | KYC | AML |
|---|---|---|
| Purpose | Verify who the customer is | Detect and prevent money laundering & financial crime |
| When it happens | At onboarding and periodic review | Continuously throughout the customer relationship |
| What it covers | Identity, address, beneficial ownership, risk classification | Transaction monitoring, alert management, STR filing, sanctions screening |
| CBN requirement | Mandatory, Customer Due Diligence under CBN AML/CFT Regs | Mandatory, Full AML programme under CBN AML/CFT/CPF Regs 2022 |
| Technology | Identity verification platforms, biometrics, BVN/NIN lookup | Transaction monitoring systems, AI anomaly detection, goAML integration |
| Output | Customer risk rating (Low/Medium/High) | Alerts, cases, STRs, CTRs, SAR filings |
| Failure consequence | CBN fine for inadequate CDD | CBN fine + potential licence action for systemic AML failures |
Many Nigerian banks, particularly fintechs, microfinance banks, and PSBs, invest heavily in onboarding identity verification (BVN checks, document scans, biometrics) but have no automated transaction monitoring in place. This creates a critical compliance gap:
KYC tells you WHO the customer is. AML tells you WHAT they're doing.
A perfectly KYC'd customer can still launder money. Without transaction monitoring, the bank cannot detect the activity.
CBN examinations test your AML programme, not just your onboarding.
Examiners review alert rates, STR filing history, case management, and goAML integration. Strong KYC scores zero on these tests.
STR obligations are triggered by transaction activity, not customer identity.
The legal obligation to file an STR arises from suspicious behaviour, which requires monitoring to detect. KYC alone cannot trigger an STR.
Identity verification platforms that check BVN, NIN, or run biometric checks serve the KYC component of compliance. They are valuable tools, but they address only the onboarding layer. They do not monitor transactions, detect structuring, score alert velocity, file STRs, or provide CBN-examination-ready reporting.
A complete CBN AML compliance programme requires both: identity controls at onboarding and an automated AML platform for ongoing monitoring and reporting. These are not alternatives, they are complementary layers of the same regulatory obligation.
AI Shield Nexus integrates with your existing KYC/identity layer and adds the transaction monitoring, alert management, goAML reporting, and AI risk scoring you need to complete your CBN AML programme.
What is the difference between KYC and AML?
KYC (Know Your Customer) is the process of verifying a customer's identity and assessing their risk at onboarding. AML (Anti-Money Laundering) is the broader, ongoing programme of transaction monitoring, suspicious activity detection, and regulatory reporting. KYC is one component of AML, not a substitute for it.
Does KYC alone satisfy CBN AML requirements?
No. The CBN AML/CFT/CPF Regulations 2022 require Nigerian banks to maintain a full AML programme including automated transaction monitoring, STR/CTR reporting, sanctions screening, and ongoing due diligence, not just identity verification at onboarding.
What does CBN require for AML compliance?
CBN requires: an approved AML policy, designated MLRO, automated transaction monitoring, KYC/CDD controls, STR filing via goAML within 24 hours, CTR filing for ₦5M+ cash transactions, annual AML training, and independent audit of AML controls.