AI agents for business finance: what they can and can't do
What AI agents can do in bookkeeping, close, collections and compliance today, where a person must stay in charge, and how to judge a product.
The short answer
Most staff fraud in small businesses succeeds because one person can create a payment, approve it and then reconcile it. Split those duties, verify every new or changed payee through a second channel, keep cash to a small logged float, and review bank statements yourself every week. These checks cost little and remove most of the easy routes.
Owning a business in Nigeria while you live abroad does not make fraud more likely, but it does make it slower to notice. The same person who handles payments often also handles the reports you rely on, and distance means you see the numbers after they have been tidied. The fix is not to distrust your team; it is to design the work so that no single person can move money and hide it.
Where the risk usually sits
Patterns that come up again and again in small businesses, wherever they are:
- Ghost payees: a supplier or staff member who does not exist, or no longer works for you, still receiving payments.
- Changed bank details: a real supplier's account number quietly replaced with another one.
- Inflated invoices: a supplier charges more than agreed and shares the difference with a staff member.
- Cash leakage: takings or petty cash not banked in full.
- Duplicate payments: the same invoice paid twice, with the second refund going somewhere else.
- Payroll padding: overtime, allowances or salary changes nobody approved.
Separate the duties
Separation of duties means the steps in a payment are held by different people. In a small office you may only have two or three staff, so combine roles carefully:
| Step | Who should hold it | Who should not |
|---|---|---|
| Add or change a supplier or employee bank account | You, or a second director | Whoever creates payments |
| Create a payment | Office manager or accounts officer | — |
| Approve and release a payment | You above the ceiling; manager below it | The person who created it |
| Reconcile the bank account | Your accountant or an agent reporting to you | The person who makes payments |
| Receive bank statements | You, directly from the bank or app | Only via a staff member |
The last row is the cheapest control there is: statements should reach you without passing through the person whose work they check.
Verify payees through a second channel
The FBI's guidance on business email compromise advises using a secondary channel or two-factor authentication to verify any request to change account details, and checking the full sender address, especially on a phone. In practice:
- When a supplier "changes bank", call them on a number you already hold, not one in the new email or letter.
- Check that the account name returned by the bank's name enquiry matches the supplier's registered name.
- Hold the first payment to a new account until the check is done, whatever the urgency.
- Keep a supplier master list that only you can edit.
Our Nigeria library covers this in more depth for import suppliers: supplier changed bank details? how to stop payment fraud.
Keep cash small and visible
Cash is the hardest thing to check from abroad. Nigerian rules already limit it: the Money Laundering (Prevention and Prohibition) Act 2022, s.2, as quoted by TheCable, bars a body corporate from making or accepting a cash payment above ₦10,000,000 except through a financial institution, and CBN rules from 1 January 2026, as reported by Channels TV, cap corporate cash withdrawals at ₦5 million a week across channels with a 5% charge on the excess. Within those limits:
- Keep a fixed petty cash float, topped up only against receipts (see petty cash controls for an owner abroad).
- Ask customers to pay by transfer to the business account, never to a staff member's account or POS terminal.
- Bank cash takings daily, and compare deposits with the sales record.
Reviews that catch what slips through
Controls reduce the chance of fraud; reviews catch the cases where they fail. A weekly half hour is enough for most small businesses:
- Scan the statement for payees you do not recognise and round-number payments.
- Compare payroll to your headcount list and the last approved salary schedule.
- Look for payments just under the approval ceiling, and several payments to one payee on one day.
- Ask for two or three supporting invoices at random each month and check them with the supplier.
- Read the monthly pack in monthly reports to ask your Nigerian manager for.
If you find something
- Remove the person's payment and banking access first, then ask questions.
- Preserve the records: statements, messages, invoices, login history.
- Contact your bank quickly about any recent transfers.
- Take legal advice before dismissing anyone or reporting. Our Nigeria library explains how to report fraud to the police and EFCC.
Where Pryme fits
On a Pryme Business Account, the Finance and Compliance agents prepare payments and checks, a person approves above a ceiling you set, and every action is recorded, so the creator and approver of a payment are visibly different. Approvals use an authenticator app and transaction PIN, not SMS codes (security).
Questions people ask
What is the most common staff fraud in small Nigerian businesses?
There is no official national breakdown, but the routes that recur are changed supplier bank details, ghost payees on payroll, inflated invoices and cash not banked in full.
How can I check my Nigerian staff are not stealing when I am abroad?
Get bank statements directly, split payment creation from approval, verify new payees by phone on a known number, and review the statement yourself every week.
Is there a legal limit on cash payments for a Nigerian company?
The Money Laundering (Prevention and Prohibition) Act 2022, s.2, as quoted by TheCable, bars a body corporate from cash payments above ₦10,000,000 except through a financial institution. CBN rules also cap corporate cash withdrawals at ₦5 million a week from January 2026.
Should I tell staff about the controls?
Yes. Written, explained controls deter fraud and protect honest staff from suspicion when something goes wrong.
Sources
- FBI IC3, Business Email Compromise · accessed Oct 2026
- TheCable, report quoting s.2 Money Laundering (Prevention and Prohibition) Act 2022 (12 Dec 2022) · accessed Oct 2026
- Channels TV, CBN revises cash withdrawal rules effective January 2026 (3 Dec 2025) · accessed Oct 2026
This article is general information, not financial, legal or tax advice. Products described are provided under the terms on this site and are subject to regulation and eligibility.