AML Compliance for Securities Firms and Stockbrokers in Nigeria: SEC and CBN Requirements

Introduction

AML compliance for securities firms and stockbrokers in Nigeria in 2026 is no longer an administrative exercise managed by a small compliance team  it is a technology-driven, regulator-audited obligation with criminal liability attached for those who fall short. The SEC's updated regulations, the CBN's March 2026 Baseline Standards, and the new Investments and Securities Act have collectively raised the bar to a level that demands automated systems, documented processes, and timely reporting.

Nigerian stockbrokers sit at the intersection of large capital flows, complex corporate structures, and high-value client transactions. Every one of those dimensions creates exposure to placement, layering, and integration  the three stages of money laundering. This guide maps every material AML obligation a Nigerian securities firm faces in 2026, explains the regulatory framework that governs them, and provides the compliance infrastructure a firm needs to avoid regulatory sanction.

The Regulatory Framework: SEC, CBN, and NFIU

1. The Securities and Exchange Commission (SEC)

The SEC Nigeria is the primary regulator for all capital market operators (CMOs), including stockbrokers, investment advisers, fund managers, underwriters, and trustees. The SEC AML/CFT/CPF Regulations, gazetted on 12 May 2022, establish the foundational compliance framework for every registered CMO.

Under those regulations, stockbrokers must conduct risk-based customer due diligence on all clients, file STRs within 24 hours of identifying suspicious transactions, and maintain documented AML policies approved at board level. Failure to comply constitutes a regulatory offence that can result in suspension, deregistration, and referral to the EFCC.

2. The Central Bank of Nigeria (CBN)

The CBN Circular BSD/DIR/PUB/LAB/019/002, issued 10 March 2026, mandates automated AML systems for all Nigerian financial institutions. While the circular is primarily directed at deposit money banks and OFIs, its requirements materially affect stockbrokers in two ways.

First, custodian banks that hold assets on behalf of stockbrokers' clients must achieve full automated AML compliance by 10 September 2027. If a custodian bank fails that deadline, it risks regulatory sanction that disrupts the custody and settlement services stockbrokers depend on daily. Second, payment service providers used for fund transfers to and from client accounts must also comply. Stockbrokers bear responsibility for conducting due diligence on their third-party partners' AML compliance status.

3. The Nigerian Financial Intelligence Unit (NFIU)

The NFIU is Nigeria's financial intelligence unit and the recipient of all STRs and CTRs from CMOs. Every stockbroker must be registered on the NFIU's GoAML platform and use it as the sole channel for regulatory reporting. The NFIU coordinates with the EFCC and relevant law enforcement agencies on investigations arising from filed reports.

AML Compliance Obligations for Nigerian Stockbrokers

1. Customer Due Diligence (CDD)

CDD must be conducted at account opening and on an ongoing, risk-rated basis. The table below summarises the documentation requirements by client type.

Stockbrokers must not open accounts for shell companies  entities where no UBO can be identified after reasonable inquiry. Correspondent institution due diligence applies when clearing trades through other broker-dealers.

Nigerian stockbrokers must verify client identity, conduct beneficial ownership checks, and assess the source of funds for high-risk clients. CDD must be updated on an ongoing basis, not only at onboarding. For corporate clients, UBO verification must trace the ownership chain to a natural person.

2. Beneficial Ownership Verification

For corporate clients, every individual holding 25% or more of shares or voting rights must be identified and verified. Where a multi-layer holding structure obscures the UBO, a full look-through analysis must be conducted and documented at every layer until a natural person is reached. Nominee shareholding arrangements require additional scrutiny  the nominator must be treated as the beneficial owner, not the nominee.

Youverify's UBO mapping tool provides multi-layer corporate ownership graph visualisation, enabling stockbrokers to conduct look-through analysis and document beneficial ownership chains in a format that satisfies SEC documentation standards.

3. Transaction Monitoring

Stockbrokers handle equity trades, bond purchases, custody transfers, margin lending, and settlement payments. Each creates distinct money-laundering exposure. The typologies that most frequently appear in Nigerian capital market enforcement actions are:

1. Round-tripping: Large trades placed and reversed within short timeframes to simulate legitimate transaction volume.

2. Mirror trading: Buying securities in one account while simultaneously selling the same securities in a related account, transferring value without economic purpose.

3. Layering through broker accounts: Moving funds through multiple brokerage accounts in complex patterns to obscure trail.

4. Third-party funding: Client accounts funded by parties with no identifiable relationship to the account holder.

An effective transaction monitoring system must generate real-time alerts on all four typologies, with thresholds calibrated to each client's risk profile and trading history. Youverify's transaction monitoring platform provides rule-based and machine-learning alert engines designed specifically for the Nigerian securities market.

A stockbroker's automated monitoring flags a corporate client that has placed and reversed ₦45 million in NGX equity trades within a 72-hour window across three accounts with the same UBO. The compliance officer escalates to the MLRO, who confirms a round-tripping pattern and files an STR with the NFIU within the 24-hour window. The filing leads to a joint NFIU-EFCC inquiry that identifies a broader layering scheme across four financial institutions.

4. Suspicious Transaction Reporting

Once a suspicious transaction is identified  whether through automated monitoring, manual review, or staff escalation  the compliance officer must complete the following steps:

1. Conduct an internal investigation and document all findings.

2. File an STR on the NFIU GoAML portal within 24 hours of the determination.

3. Observe tipping-off prohibitions strictly  the client must not be informed that an STR has been filed.

4. Retain all documentation relating to the suspicious transaction for a minimum of five years.

For guidance on the full STR lifecycle, see Youverify's resource on suspicious activity reporting obligations for Nigerian financial institutions.

The Investments and Securities Act 2025: What Changed

The ISA 2025, which replaced the ISA 2007, introduced three AML-relevant changes that every Nigerian securities firm must now account for.

The SEC now holds wider enforcement powers  including the ability to freeze accounts and refer matters to the EFCC without a court order in urgent cases. Digital asset securities have been formally brought under the SEC's regulatory perimeter, meaning tokenised securities now attract the same full AML/CFT treatment as traditional equities. And all CMOs previously registered under the ISA 2007 must meet revised minimum capital thresholds by 30 June 2027, creating additional compliance urgency for under-capitalised firms.

Building a Compliant AML Programme: Checklist for Stockbrokers

A functional AML compliance programme for a Nigerian stockbroker must include:

1. Written AML/CFT policy approved by the board of directors.

2. Designated MLRO registered with the SEC and listed on the NFIU GoAML platform.

3. Risk-based customer classification with documented criteria for low, medium, and high-risk.

4. CDD and EDD procedures differentiated by client category.

5. UBO identification and verification process for all corporate accounts.

6. Automated transaction monitoring with documented alert thresholds and escalation procedures.

7. GoAML registration and STR/CTR filing procedures with clear MLRO accountability.

8. Annual AML training programme for all staff, with records of completion retained.

9. Independent AML audit or review at least once per calendar year.

10. Record retention policy covering a minimum of five years for all KYC and transaction records.

Youverify's AML compliance software supports Nigerian securities firms across all ten of these programme components, from automated identity verification and UBO mapping to GoAML-ready STR filing templates.

Conclusion

AML compliance for securities firms and stockbrokers in Nigeria in 2026 is defined by three intersecting frameworks  the SEC AML/CFT/CPF Regulations 2022, the Investments and Securities Act 2025, and the CBN's March 2026 Baseline Standards. Together, they demand automated systems, documented risk-based processes, real-time transaction monitoring, and timely STR filing. Firms that treat compliance as a paper exercise face enforcement by the SEC, reporting failures to the NFIU, and personal liability for their compliance officers and directors.

The clearest path to sustainable compliance is a purpose-built AML technology platform that automates the heavy lifting  from identity verification at onboarding to alert generation and GoAML-ready reporting. If your firm is building or upgrading its AML programme to meet 2026 requirements, contact Youverify to see how Nigerian securities firms are achieving full regulatory compliance.

See also: AML Compliance Software for Banks 2026 | Suspicious Activity Reporting in Nigeria

About The Author 

Victoria Okere is a compliance and regulatory writer specialising in African financial markets, AML/CFT regulation, and financial crime prevention. With over eight years covering the Nigerian and pan-African regulatory landscape, Victoria has written extensively on SEC and CBN enforcement, capital market compliance, and the implementation of AML technology across emerging markets.