AI agents for business finance: what they can and can't do
What AI agents can do in bookkeeping, close, collections and compliance today, where a person must stay in charge, and how to judge a product.
The short answer
Designated non-financial businesses and professions listed in section 30 of the Money Laundering (Prevention and Prohibition) Act 2022, such as real estate firms, dealers in jewellery, cars and luxury goods, accountants and tax consultants, hotels and supermarkets, must register with SCUML. Registration is online and free, but it brings ongoing duties: a compliance officer, customer due diligence, records, training and reports such as currency transaction reports. An AI agent can run checklists and track reports; suspicion and filing decisions stay with people.
Who must register
SCUML, the Special Control Unit against Money Laundering, supervises designated non-financial businesses and professions, known as DNFBPs. SCUML's own guidance says not every business must register; section 30 of the Act sets out who does. According to a legal summary of the Act, the list includes dealers in:
- Jewellery, precious stones and metals.
- Cars and luxury goods.
- Real estate, including estate developers, estate surveyors and valuers, and estate agents.
- Accounting services, including chartered accountants, audit firms and tax consultants.
- Clearing and settlement.
- Hotels and casinos.
- Supermarkets.
- Mechanised farming equipment and machinery.
Other businesses may be designated by the relevant ministry or regulator, so check SCUML's current list if your sector is close to one of these.
How registration works
SCUML says registration is done online through its portal, is free, and needs the business's CAC incorporation documents, its tax identification certificate and, where relevant, a professional certificate or licence. Once approved, the e-certificate is sent to the director's email. The EFCC has stated publicly that a SCUML certificate is not clearance by the EFCC: it shows you are registered, not that your business has been vetted.
The duties that follow
SCUML lists the obligations of registered entities. Small businesses, including one-person firms, are not excused; SCUML says the managing director should nominate themselves as compliance officer if there is no one else.
| Duty | What it means in practice |
|---|---|
| Compliance officer | A named person responsible for the programme |
| KYC and customer due diligence | Verify customers, classify them by risk and get beneficial ownership information where a customer acts for someone else |
| Targeted financial sanctions | Screen customers against sanctions lists |
| Statutory reports | Currency transaction reports, suspicious transaction reports, PEP reports and others |
| Platforms | Subscribe to the goAML reporting platform and the sanctions list website |
| Training, audit and records | Train staff, maintain internal audit and keep proper records |
A legal summary of the Act states that currency transaction reports are due within seven days for cash transactions above ₦5,000,000 for an individual or ₦10,000,000 for a corporate body, and that suspicious transaction reports have no threshold and go to the Nigerian Financial Intelligence Unit. Confirm current thresholds with SCUML.
What an AI agent can do
- Hold the SCUML registration record and any renewal or update dates in the obligations register.
- Run a KYC checklist for every new customer and refuse to mark onboarding complete with missing items.
- Screen customers and counterparties, and send possible sanctions or PEP matches to a person.
- Flag cash transactions above the CTR thresholds and start a seven-day clock.
- Draft reports for the compliance officer to review and file through goAML.
- Log staff training and remind the owner when it is due.
What stays with a person
Whether a transaction is suspicious is the compliance officer's call, and the customer must not be told a report is being made. An agent can show a pattern, such as a buyer paying for a property in many cash instalments, but should not decide what it means.
Worked example
Example only. A real estate developer in Lekki sells a flat for ₦85,000,000. A buyer pays a ₦12,000,000 cash deposit at the site office. The agent flags that the cash exceeds the corporate CTR threshold if the buyer is a company, or the individual one if not, and opens a seven-day report case with the buyer's KYC file attached. It also notes that the buyer has not provided a source of funds. The compliance officer, who is the managing director, completes the CTR and asks the buyer for evidence of funds before accepting further payments.
Building a programme that fits a small firm
A two-person estate agency or a single jewellery shop cannot run the programme of a bank, and SCUML does not expect it to. What it does expect is that the duties are met in proportion to the business. A practical small-firm set-up looks like this:
- A one-page risk assessment naming the main risks: cash buyers, diaspora buyers paying through third parties, customers who will not explain their source of funds.
- A short KYC form used for every customer, with the identity documents and, for companies, the CAC record and beneficial owners.
- A cash policy that says when cash is accepted, who may receive it and how it is recorded.
- A log of every currency transaction report and suspicious transaction report filed, with dates and goAML references.
- A yearly training session, even if it is the owner briefing one assistant, with a signed record.
An agent can keep each of these documents current and remind the owner when a review is due. It can also pull the KYC files together quickly if SCUML or the NFIU asks for them, which is when a well-kept record pays for itself.
Where Pryme fits
The Pryme Compliance agent keeps an obligations register, screens customers and counterparties, and records every refusal. A sanctions or PEP match holds the funds and goes to a person. Naira deposits are held by Solid Allianze Microfinance Bank, licensed by the CBN. For background, read AI for KYC and AML monitoring and cash reporting in four countries.
Questions people ask
Does every Nigerian business need SCUML registration?
No. Only designated non-financial businesses and professions listed in section 30 of the Act, or designated later, must register.
How much does SCUML registration cost?
SCUML says registration is free and done online through its portal.
Is a SCUML certificate an EFCC clearance?
No. The EFCC has said publicly that a SCUML certificate is not clearance by the EFCC.
Can an AI agent file reports with the NFIU?
It can draft reports and track deadlines, but the compliance officer should review and file them, and decide on suspicion.
Sources
- SCUML: frequently asked questions · accessed Oct 2026
- Omaplex: The role of SCUML under the Money Laundering (Prevention and Prohibition) Act 2022 · accessed Oct 2026
- EFCC: Press statement, SCUML certificate is not clearance by EFCC · accessed Oct 2026
- ICIR: Real estate is latest money laundering avenue, says SCUML head · accessed Oct 2026
This article is general information, not financial, legal or tax advice. Products described are provided under the terms on this site and are subject to regulation and eligibility.