KYC & AMLApril 27, 2026

KYC vs AML: What Nigerian Banks Must Understand

Direct Answer

KYC is a subset of AML, not a replacement for it. KYC verifies who a customer is at onboarding. AML is the ongoing programme of transaction monitoring, suspicious activity detection, and regulatory reporting that the CBN requires throughout the customer relationship. A bank with strong KYC but no transaction monitoring is still non-compliant.

One of the most common misunderstandings in Nigerian banking compliance is treating KYC (Know Your Customer) and AML (Anti-Money Laundering) as interchangeable. They are not, and the confusion costs institutions dearly in CBN enforcement actions.

What is KYC?

KYC (Know Your Customer) is the process of verifying a customer's identity, understanding the nature of their business, and assessing their risk level, primarily at the point of onboarding, and periodically thereafter. In Nigeria, KYC obligations are defined by the CBN's tiered account framework and the AML/CFT/CPF Regulations 2022.

Customer identification and BVN/NIN verification
Beneficial ownership verification for companies
Customer risk classification (Low/Medium/High/PEP)
Source of funds and source of wealth assessment
Ongoing review at trigger events or risk-based intervals

What is AML?

AML (Anti-Money Laundering) is the complete programme of policies, controls, and procedures a Nigerian bank must maintain to detect, prevent, and report money laundering. It is defined by the NFIU, CBN, and FATF Recommendations. KYC is one component of AML, but an AML programme is far broader.

✓Automated transaction monitoring across all channels
✓Alert management and case investigation
✓STR filing via goAML within 24 hours
✓CTR filing for ₦5M+ cash transactions
✓Sanctions and PEP screening (ongoing)
✓Employee AML training programme
✓MLRO and Board-level governance
✓Independent audit of AML controls

KYC vs AML: Side-by-Side Comparison

AspectKYCAML
PurposeVerify who the customer isDetect and prevent money laundering & financial crime
When it happensAt onboarding and periodic reviewContinuously throughout the customer relationship
What it coversIdentity, address, beneficial ownership, risk classificationTransaction monitoring, alert management, STR filing, sanctions screening
CBN requirementMandatory, Customer Due Diligence under CBN AML/CFT RegsMandatory, Full AML programme under CBN AML/CFT/CPF Regs 2022
TechnologyIdentity verification platforms, biometrics, BVN/NIN lookupTransaction monitoring systems, AI anomaly detection, goAML integration
OutputCustomer risk rating (Low/Medium/High)Alerts, cases, STRs, CTRs, SAR filings
Failure consequenceCBN fine for inadequate CDDCBN fine + potential licence action for systemic AML failures

Why Nigerian Banks That Focus Only on KYC Fail CBN Compliance

Many Nigerian banks, particularly fintechs, microfinance banks, and PSBs, invest heavily in onboarding identity verification (BVN checks, document scans, biometrics) but have no automated transaction monitoring in place. This creates a critical compliance gap:

KYC tells you WHO the customer is. AML tells you WHAT they're doing.

A perfectly KYC'd customer can still launder money. Without transaction monitoring, the bank cannot detect the activity.

CBN examinations test your AML programme, not just your onboarding.

Examiners review alert rates, STR filing history, case management, and goAML integration. Strong KYC scores zero on these tests.

STR obligations are triggered by transaction activity, not customer identity.

The legal obligation to file an STR arises from suspicious behaviour, which requires monitoring to detect. KYC alone cannot trigger an STR.

Where Identity Verification Tools Fit In

Identity verification platforms that check BVN, NIN, or run biometric checks serve the KYC component of compliance. They are valuable tools, but they address only the onboarding layer. They do not monitor transactions, detect structuring, score alert velocity, file STRs, or provide CBN-examination-ready reporting.

A complete CBN AML compliance programme requires both: identity controls at onboarding and an automated AML platform for ongoing monitoring and reporting. These are not alternatives, they are complementary layers of the same regulatory obligation.

Close the gap between KYC and full AML compliance

AI Shield Nexus integrates with your existing KYC/identity layer and adds the transaction monitoring, alert management, goAML reporting, and AI risk scoring you need to complete your CBN AML programme.

Frequently Asked Questions

What is the difference between KYC and AML?

KYC (Know Your Customer) is the process of verifying a customer's identity and assessing their risk at onboarding. AML (Anti-Money Laundering) is the broader, ongoing programme of transaction monitoring, suspicious activity detection, and regulatory reporting. KYC is one component of AML, not a substitute for it.

Does KYC alone satisfy CBN AML requirements?

No. The CBN AML/CFT/CPF Regulations 2022 require Nigerian banks to maintain a full AML programme including automated transaction monitoring, STR/CTR reporting, sanctions screening, and ongoing due diligence, not just identity verification at onboarding.

What does CBN require for AML compliance?

CBN requires: an approved AML policy, designated MLRO, automated transaction monitoring, KYC/CDD controls, STR filing via goAML within 24 hours, CTR filing for ₦5M+ cash transactions, annual AML training, and independent audit of AML controls.