Pricing
Language

Guide · Updated 27 October 2026 · 15 min read

Sanctions and PEP Screening in Nigeria: A Practical Guide

Plan sanctions and PEP screening in Nigeria: relevant parties and lists, match investigation, sector-specific duties, reporting distinctions and decision records.

Share

A Nigerian company passes a name check. Its new beneficial owner is flagged as a possible PEP, and the person receiving its payment resembles someone on a sanctions list. Those are three different questions. Clearing the company name does not answer the other two.

A useful screening process connects each supplied person or company to their role, the sources checked and the decision that follows. For Nigerian businesses, that also means separating sanctions controls, PEP due diligence and the different regulatory reports.

This guide covers the practical process for financial institutions and designated non-financial businesses and professions (DNFBPs). The applicable sector rules matter: a bank, an investment business and a DNFBP should not simply copy the same procedure.

Start with the rules that apply to your business

The Money Laundering (Prevention and Prohibition) Act 2022 provides a customer-identification and due-diligence framework for financial institutions and DNFBPs. Section 4 addresses customers, beneficial owners and people acting for customers. It also distinguishes foreign PEP measures from higher-risk domestic or international-organisation PEP relationships.1

Targeted financial sanctions have a broader reach than the AML obligations for financial institutions and DNFBPs. The 2022 sanctions regulations impose relevant freezing duties on all natural and legal persons in Nigeria, including other businesses.23

Sector rules add detail. For example, the 2024 EFCC/SCUML regulations expressly include a customer or beneficial owner being a PEP as a DNFBP enhanced-due-diligence trigger under Regulation 31(3)(d). Regulation 38 addresses monthly PEP transaction reports and nil reporting.4

Build the procedure around your actual activities and supervisor. Record the relevant law, sector instrument, reporting obligations and responsible decision-maker. Where company policy goes further, say so and explain the risk it addresses. Do not describe another country's PEP treatment as the Nigerian rule.

Select sanctions lists and PEP information

For targeted financial sanctions, use the applicable Nigeria Sanctions List and UN sources. The Nigeria Sanctions Committee provides access to both and publishes implementation materials.5

PEP research serves a different purpose: establishing the public function, relevant dates and relationships behind a candidate. A commercial profile can help locate that information; it does not settle whether the person meets the applicable definition or what measures the firm must take.

Other sanctions regimes may be relevant through the parties, services, payment chain or applicable legal obligations. Contractual conditions and company policy can also matter. Record why an OFAC, UK, EU or other source is included rather than presenting every foreign list as a universal Nigerian requirement. The practical sanctions guide explains how to separate the legal perimeter from source selection.

For each configured source, establish its scope, how updates reach the screening process and what happens if an update fails. A category labelled “global sanctions” or “PEPs” does not by itself demonstrate coverage of the sources and roles your process needs.

Map parties and review events

The table below is a suggested operating record. Apply it within your sector's requirements; it is not a new statutory checklist.

Party or eventWhat to connectReview question and record
Prospective individual customerSupplied name, identifiers and intended relationshipAre there plausible sanctions or PEP candidates? Record the sources, date and review outcome.
Company or other legal arrangementLegal name, registration details and collected ownership informationHas the entity been checked separately from its supplied owners and controllers? Keep the role and ownership evidence.
Beneficial owner or controllerIdentity, interest and basis of control established through due diligenceDoes a candidate concern this person, and what does their involvement mean for the relationship?
Representative or authorised signatoryIdentity, authority and customer relationshipIs the person acting in the stated capacity, and are any relevant candidates unresolved?
Relevant transaction partyOriginator, beneficiary, intermediary or other party available in the transaction informationDoes the actual payment or service involve a listed party or raise a separate risk question?
New ownership, public role or designationChanged facts linked to existing recordsWhich subjects and pending activities need reassessment, and who owns the follow-up?

Obtain ownership and authority information through the firm's due-diligence process. Screening supplied names does not discover every undisclosed owner. Equally, a CDD ownership threshold is not automatically the test for whether sanctions restrictions affect particular assets or a company.

Keep list screening separate from customer-file refreshes

The Nigeria Sanctions Committee's published implementation guidance calls for checks before onboarding or occasional transactions and ongoing, at least daily screening. It covers customer populations, transaction parties, beneficial owners and other specified relationships.5

That is different from periodically refreshing a customer's identity documents or risk assessment. An annual customer-file review cannot substitute for responding to a new sanctions designation. Nor does a quarterly PEP review describe the timetable for every regulatory report.

Define the separate processes: source updates, screening, customer-data changes, transaction checks and due-diligence reviews. Record their applicable requirements, frequency, exceptions and failure handling. Test that an updated source reaches the intended population rather than assuming a successful import means every relevant subject was checked.

Investigate candidates without delaying required action

Compare the source record with the information held about the subject: aliases, date of birth, identifiers, address, company registration, role and relationships. Do not turn “two identifiers match” into a universal confirmation rule. Missing or contradictory information needs assessment in context.

A name similarity is not, by itself, proof that two people are the same. However, the Committee's guidance calls for suspension of a transaction while a potential sanctions match is assessed. Where indications or suspicion engage its freezing guidance, apply the required measures without delay. Escalation must not postpone them while the team waits for perfect information.5

The targeted-financial-sanctions regulations contain freezing, prohibition and reporting provisions. Treat freezing without delay as an urgent obligation where its legal conditions are met; do not treat a reporting deadline as permission to wait before freezing. Ownership, control, acting on behalf of a designated party and the assets affected need their own analysis.23

Keep the identity finding and the legal action separate in the case record. Record who assessed the facts, the basis for any restriction and what information remains outstanding. Do not notify the customer in a way that breaches applicable confidentiality or notification restrictions.

Apply PEP measures under the relevant framework

Identify whether the candidate concerns the customer, an owner or a relevant family or associate relationship. Verify the role and dates rather than accepting a label alone. Leaving office should prompt assessment under the applicable Nigerian framework, not automatic removal after a borrowed foreign time limit.

At Act level, Section 4(8) addresses senior approval, source-of-wealth/source-of-funds measures and enhanced monitoring for foreign PEP relationships; Section 4(9) addresses the higher-risk domestic and international-organisation cases. Apply the relevant sector requirements as well, including the DNFBP provision noted above.14

Record the PEP finding, assessed risk, required measures and approval separately. PEP status does not establish a sanctions designation or prove wrongdoing. Reviewing the origin of money is also distinct from name screening; the funds and wealth evidence guide illustrates that distinction, but its UK legal requirements must not be substituted for Nigerian ones.

Separate the three reporting and action tracks

TrackTrigger and practical distinction
PEP regulatory reportingApply the report required for your entity category. SCUML's 2024 Regulation 38 provides for monthly PEP transaction reporting and nil reports. NFIU's RapidAML portal also identifies PEP reporting for relevant CBN-regulated categories. Do not assume financial institutions are exempt.
Suspicious transaction reportingAssess and report under the applicable suspicion requirements. Section 7 of the Act addresses immediate reporting and a 24-hour reporting provision; this is not a general deadline for every kind of report. A PEP label alone does not establish suspicion.
Targeted financial sanctionsApply the applicable freezing/prohibition provisions and sanctions notifications, including associated NFIU reporting obligations. These duties are not discharged merely by placing a case in a routine PEP-report queue.

These tracks can overlap, but none should be inferred solely from another. Filing an ordinary STR does not, by itself, establish that every reported account must be frozen. A separate sanctions obligation or lawful restriction may nevertheless require immediate action.12346

Maintain a reporting matrix with the instrument, trigger, recipient, current submission channel, deadline, owner and receipt. Check the entity and report type against official instructions: do not assume one portal handles every report. Account restrictions, reporting and acceptance or continuation decisions should be traceable individually.

Four fictional screening cases

A common-name sanctions candidate

A new customer shares a name with a listed individual, but the dates of birth and supporting identifiers appear different. Compare the complete records and retain the evidence. Apply the required transaction controls while the candidate is assessed; if cleared, explain why the differences establish that it is another person.

A Nigerian public-office holder

A customer's identifiers and official biography establish a domestic PEP role. The team records that finding, assesses the relationship under its own sector rules and applies the relevant enhanced measures and approvals. It does not import the UK's domestic-PEP starting point or record the customer as sanctioned because of public office.

A company with a supplied owner candidate

The company name has no sanctions candidate, but an identified owner does. Review that person's identity and interest, the ownership/control structure and the assets or activities potentially affected. The absence of an entity-name hit does not resolve the issue. Neither does a director's title, on its own, determine the restriction on every company asset.

An existing relationship affected by a new designation

A source update produces a plausible designation match for an existing customer with a pending payment. Escalate immediately and apply the required assessment, restrictions and notifications. Preserve when the update became available, when the candidate was reviewed and what action followed. Do not defer the case to the next scheduled KYC review.

Retain a record that explains the decision

  • Identify each screened subject and their role in the customer or transaction relationship.
  • Record the sources, screening time, available identifiers and relevant update information.
  • Preserve the comparison, supporting evidence, contradictions and unresolved questions.
  • Separate sanctions identity and legal analysis from PEP classification and customer-risk assessment.
  • Record the reviewer, authorised decision-maker, action, rationale and time.
  • Keep each applicable report, notification and submission receipt linked to its trigger.
  • Set the next review event and responsible person; record why a candidate was cleared or retained.

Section 8 of the Act distinguishes transaction records retained for at least five years after completion from CDD records retained for at least five years after relationship termination or the occasional transaction. For DNFBPs, Regulation 18(6) also requires records concerning ongoing investigations or disclosed transactions to be kept for at least five years after the case closes. Map each record to its applicable trigger and any additional sector requirements.14 Avoid starting one universal deletion clock when a screening alert appears.

Put screening into the process with Checklynx

Checklynx sanctions screening and PEP screening operate within the same platform. Clustered results and enriched profiles help analysts compare supplied identities, roles and relationships against configured sources. Confirm the Nigerian and international source scope required for your use case before relying on a configuration.

Screening does not verify documents, discover every owner, establish lawful fund origins, analyse transaction behaviour or make freezing, reporting and acceptance decisions. Keep those responsibilities with the appropriate teams. The PEP process guide provides wider investigation context; the Nigeria-specific sources below govern this article's local distinctions.

Official sources

Footnotes

  1. Money Laundering (Prevention and Prohibition) Act 2022, Sections 4, 7 and 8; official published text checked 27 October 2026. ↩ ↩2 ↩3 ↩4

  2. Nigeria Sanctions Committee regulations, 2022 targeted financial sanctions on terrorism, terrorism financing and related measures, especially Regulations 12–13; checked 27 October 2026. ↩ ↩2 ↩3

  3. Nigeria Sanctions Committee regulations, 2022 targeted financial sanctions on proliferation financing, especially Regulations 7–8; checked 27 October 2026. ↩ ↩2 ↩3

  4. EFCC/SCUML Regulations 2024, Regulations 18, 31(3)(d) and 38; checked 27 October 2026. ↩ ↩2 ↩3 ↩4

  5. Nigeria Sanctions Committee implementation guidance, especially pages 9–12; checked 27 October 2026. ↩ ↩2 ↩3

  6. NFIU RapidAML, published entity/report categories; checked 27 October 2026. Reporting configuration should follow the applicable current instructions. ↩

Footer