Source of Funds and AML in Nigerian Gambling: MLPPA 2022 Explained
Nigeria's Money Laundering (Prevention and Prohibition) Act 2022 requires licensed betting operators to verify source of funds for large or unusual transactions. This guide explains the MLPPA 2022 framework, what SCUML and the NFIU enforce, and what Nigerian bettors can expect when a big deposit or
Under Nigeria’s Money Laundering (Prevention and Prohibition) Act 2022, which entered into force on 12 May 2022, licensed betting operators are legally required to verify the source of funds behind large or unusual transactions before processing them. The request a player receives — asking for a bank statement, a payslip, or proof of a receipt — is not the operator’s invention. It is a statutory obligation that flows from federal legislation, enforced by the Special Control Unit Against Money Laundering (SCUML) and the Nigeria Financial Intelligence Unit (NFIU). Understanding the framework that generates these requests clarifies when they are legitimate, what documentation satisfies them, and why — in most cases — a source-of-funds check is a sign of a compliant operator rather than an obstacle to withdrawing winnings.
Table of contents
- What is the Money Laundering (Prevention and Prohibition) Act 2022?
- SCUML, the NFIU and the EFCC — who enforces AML
- What operators must report — CTR, STR and CDD
- Source of funds vs source of wealth — what a betting site can ask you for
- Cross-border cash and crypto — extra declarations
- How this protects you (and what to keep handy)
- Frequently asked questions
- Conclusion
What is the Money Laundering (Prevention and Prohibition) Act 2022?
The Money Laundering (Prevention and Prohibition) Act 2022 entered into force on 12 May 2022, signed into law by President Muhammadu Buhari. It repealed the predecessor Money Laundering (Prohibition) Act 2011 and replaced it with a more comprehensive anti-money laundering and counter-terrorism financing (AML/CFT) framework — one that formalised SCUML’s role as a statutory department of the Economic and Financial Crimes Commission (EFCC) and significantly broadened the categories of entity subject to mandatory customer due diligence, transaction reporting, and record-keeping obligations.
The 2022 Act imposes three core duties on covered entities: identify and verify customers through Customer Due Diligence (CDD), monitor transactions and file specific report types with the NFIU within prescribed deadlines, and retain customer and transaction records for at least five years. These are not aspirational guidelines; failure to comply exposes an operator to enforcement action by SCUML, including the revocation of its compliance certificate.
Why gambling operators are caught (DNFBPs)
Betting and gaming companies are classified under the MLPPA 2022 as Designated Non-Financial Businesses and Professions (DNFBPs). That classification places them in the same regulatory category as solicitors, accountants, real estate agents and car dealerships — all of which share equivalent AML obligations under the Act. A licensed online betting platform must identify customers, monitor transaction patterns and report to the NFIU on precisely the same statutory basis as a commercial bank, and on similarly tight deadlines. The DNFBP framework is the direct legal basis for every source-of-funds request a Nigerian player encounters at a compliant platform.
SCUML, the NFIU and the EFCC — who enforces AML
Two agencies occupy the enforcement centre of Nigeria’s AML system for gambling operators. SCUML — the Special Control Unit Against Money Laundering — is a department of the EFCC. Its mandate is supervisory: it registers DNFBPs, issues AML compliance certificates, conducts inspections and can impose sanctions on non-compliant entities. The NFIU (Nigeria Financial Intelligence Unit) performs a distinct function — it is the national repository for financial intelligence reports, receiving and analysing the data that SCUML-regulated businesses file through the goAML system. SCUML asks whether an operator is meeting its compliance obligations; the NFIU analyses what the transaction data reveals about potential financial crime.
SCUML registration for operators
Registration with SCUML is a mandatory pre-condition for commencing betting operations in Nigeria — not a post-launch formality. An operator must demonstrate that it has a functioning AML compliance programme, designated compliance officers and the internal monitoring systems required under the MLPPA 2022 before a certificate is issued. For players, the presence of a valid SCUML certificate provides a degree of baseline assurance: the operator has met federal compliance requirements at the point of registration and has committed to the source-of-funds and CDD processes that the legislation mandates.
What operators must report — CTR, STR and CDD
Three instruments set the reporting framework that determines when a transaction moves from routine processing to formal regulatory review.
| Report type | Trigger | Filing deadline |
|---|---|---|
| Currency Transaction Report (CTR) | Cash transactions ≥ ₦5,000,000 (individual) / ≥ ₦10,000,000 (corporate) | Within 7 days |
| Suspicious Transaction Report (STR) | Any amount judged suspicious — no minimum threshold | Within 24 hours |
| Customer Due Diligence (CDD) | At account opening and at threshold transactions; ongoing refresh | Continuous |
The CTR is threshold-based: every individual cash transaction of ₦5,000,000 or above — or ₦10,000,000 for a corporate account — triggers an automatic filing obligation with the NFIU, regardless of whether the operator judges the funds suspicious. The STR operates with no floor at all. A withdrawal of ₦80,000 that appears inconsistent with an account’s established activity can generate an STR if the operator’s compliance function assesses it as anomalous. The 24-hour filing window for STRs reflects a deliberate legislative choice: the NFIU requires the report while the transaction trail is still actionable.
Customer Due Diligence runs throughout the relationship, not merely at the point of account opening. When a customer’s activity shifts materially — a sudden increase in deposit volume, a withdrawal that exceeds anything in the account’s history — the operator is obliged to refresh its verification of that customer. A source-of-funds request arriving mid-relationship is, in almost every case, a CDD refresh event rather than a first-time identity check.
All three report types are filed through the goAML system (goaml.nfiu.gov.ng). With effect from 1 January 2026, SCUML retired its email submission channel for DNFBPs. From that date, all filings from betting operators and other designated businesses flow exclusively through the SCUML/goAML portal.
Record-keeping: minimum 5 years
Operators are required under the MLPPA 2022 to retain customer identification data and full transaction records for a minimum of five years from the date of a transaction or the end of the business relationship, whichever is later. This retention obligation explains why a source-of-funds query can reference activity that a player regards as historical: the operator’s compliance programme must maintain and periodically review that record, and a documentation gap identified during a routine audit can produce a retrospective request even for transactions completed years earlier.
Source of funds vs source of wealth — what a betting site can ask you for
The distinction between source of funds and source of wealth is substantive. Source of funds refers to the immediate origin of the specific money used in a transaction — a salary credited to the player’s bank account last month, proceeds from a property sale completed this year, a compensation payout, or a recently received inheritance. Source of wealth addresses a wider question: how a person accumulated their total assets over time, through employment, business ownership, investment returns or inherited wealth across years or decades. An operator conducting routine enhanced due diligence will ask about source of funds. Source-of-wealth documentation is reserved for customers operating at significantly higher exposure levels, where the operator needs to understand not just where this deposit came from but how the player came to hold the volume of assets they are deploying.
The most common triggers for a source-of-funds check in the Nigerian market are a single large deposit or withdrawal, a fintech wallet outflow approaching or exceeding ₦5,000,000, and international card transactions. Offshore platforms additionally monitor for cryptocurrency inflows, given the level of CBN and EFCC scrutiny directed at USDT and similar assets since early 2024. Keeping documentation relevant to these events readily accessible — a bank statement showing the relevant credit, a payment confirmation for a sale — typically allows the check to be resolved within one business day.
For the full document checklist covering what Nigerian banks and betting operators accept for SoF verification, players should refer to the bank-reporting cluster linked in the editor notes below, which deals specifically with what banks and fintechs report on a customer’s behalf and what customers can provide proactively.
When you are most likely to be asked
The first significant withdrawal is the single most common trigger. An account that has processed modest regular deposits and then seeks to withdraw a sum materially larger than anything in its history is, by definition, presenting a departure from established pattern — which is precisely what ongoing CDD monitoring is designed to flag. Because STRs carry no minimum threshold, the operator is not required to wait for the ₦5,000,000 CTR floor before initiating a review.
A legitimate licensed operator requests documentation, sets a reasonable response deadline and processes the withdrawal once verification is complete. An operator that raises successive, unresolvable source-of-funds demands exclusively after a withdrawal request is submitted — without any prior compliance activity on the account — may be using the regulatory framework to delay payment rather than comply with it. That scenario is a consumer protection matter addressed in detail in the scam-detection guidance referenced in the editor notes.
Cross-border cash and crypto — extra declarations
A separate obligation, independent of the MLPPA 2022 operator-reporting framework, applies to the physical movement of cash across Nigeria’s borders. Any person entering or leaving Nigeria with cash or negotiable instruments above US$10,000 is required to declare the amount to the Nigeria Customs Service. The threshold is denominated in US dollars regardless of the currency being carried, and the obligation rests with the traveller rather than with any financial institution; the current declaration procedure is published by the Nigeria Customs Service.
Cryptocurrency — primarily USDT — remains the dominant channel for cross-border transactions to offshore gambling platforms, given CBN restrictions on direct naira-to-foreign-operator payment flows and the persistent FX volatility that kept the exchange rate at approximately ₦1,500 to the US dollar through the first half of 2026. The CBN’s engagement with Binance in early 2024, which resulted in the suspension of the NGN peer-to-peer service in February 2024, illustrates the enforcement posture directed at high-volume crypto transfers. Large cryptocurrency movements to or from offshore gambling platforms attract specific scrutiny from the EFCC and NFIU and are not outside the scope of AML monitoring.
How this protects you (and what to keep handy)
The AML framework established by the MLPPA 2022 is, at its foundation, a financial crime prevention mechanism — but it generates a secondary benefit for players. An operator that holds a valid SCUML certificate and meets its CTR, STR and CDD filing requirements is operating under verifiable, enforceable federal obligations. The same compliance regime that generates a source-of-funds request also requires the operator to maintain a functioning AML programme and to submit to SCUML inspection. The request is not a barrier; it is, in most cases, a sign that the operator is subject to a regulatory structure that creates real legal exposure if it mishandles player funds.
The documentation that resolves most source-of-funds requests is not complex. A bank statement covering the period in which the relevant funds were credited, a payslip from the applicable pay period, or proof of a one-off receipt — a sale agreement, an insurance confirmation, a solicitor’s letter for an inheritance — is ordinarily sufficient for a CDD review of a single large transaction. Storing those documents in an accessible format shortens the resolution time considerably. Players who regularly use licensed platforms for large transactions may find it practical to retain three to six months of bank statements and recent payslips as a matter of routine.
For the identity-verification dimension of compliance — NIN, BVN and proof of address — the NIN/BVN/KYC guide addresses those requirements separately, as they concern who a player is rather than where their money comes from. AML record-keeping and tax reporting are also distinct obligations; the tax clusters cover withholding tax computation for Nigerian gambling winnings independently of the framework described here.
Frequently asked questions
Conclusion
Source-of-funds checks at Nigerian betting sites are not optional and not operator-specific: they are a federal statutory requirement. The Money Laundering (Prevention and Prohibition) Act 2022 — in force since 12 May 2022 — places licensed gambling operators under AML obligations enforced by SCUML and the NFIU, including mandatory Customer Due Diligence, Currency Transaction Reports for individual cash transactions of ₦5,000,000 or above filed within seven days, Suspicious Transaction Reports for any anomalous amount filed within 24 hours, and a minimum five-year record-keeping requirement. For players, the practical implication is straightforward: a large or unusual transaction will trigger a source of funds check, and keeping basic documentation to hand — a relevant bank statement, a payslip, evidence of a one-off receipt — is the most reliable way to ensure the check resolves quickly rather than delaying a withdrawal. A request from a SCUML-certified operator is, in most cases, confirmation that the operator is operating within Nigeria’s legal framework.
Gambling involves financial risk. Players are encouraged to set deposit limits, take regular breaks and play responsibly. Anyone in Nigeria experiencing difficulties related to gambling can contact Gamble Alert on +234 916 295 7989 or visit gamblealert.org. Gambling is for adults aged 18 and over.