Source of funds na the proof wey a betting site — or your own bank — fit ask you for, to confirm where the money wey you dey deposit or wan withdraw actually comot from. When a platform ask you for bank statement, pay slip or proof of one-off payment before dem release a big withdrawal, na the Money Laundering (Prevention and Prohibition) Act 2022 dey behind that request, no be say the operator dey do you anyhow. The Act enter force for 12 May 2022 and e put licensed betting operators under the same anti-money-laundering duties wey commercial banks dey carry. This guide break down the law wey dey generate the request, the agencies wey dey enforce am, the exact reporting thresholds wey dey turn a normal transaction into a compliance matter, and wetin you fit keep ready so a big withdrawal go pass smooth. Every date, figure and deadline for here come straight from the Act and from the supervisory guidance wey follow am.
Table of contents
- Wetin be the Money Laundering (Prevention and Prohibition) Act 2022?
- SCUML, the NFIU and the EFCC — who dey enforce AML
- Wetin operators must report — CTR, STR and CDD
- Source of funds vs source of wealth — wetin a betting site fit ask you for
- Cross-border cash and crypto — extra declarations
- How this dey protect you (and wetin to keep handy)
- Conclusion
Wetin be the Money Laundering (Prevention and Prohibition) Act 2022?
The Money Laundering (Prevention and Prohibition) Act 2022 — people dey call am MLPPA 2022 — enter force for 12 May 2022, after President Muhammadu Buhari sign am into law. E repeal the Money Laundering (Prohibition) Act 2011 and put a broader anti-money-laundering and counter-terrorism-financing (AML/CFT) framework for ground. Two things change wey matter for punters: the Act give SCUML statutory backing as a department of the Economic and Financial Crimes Commission (EFCC), and e widen the list of businesses wey must run customer checks, file transaction reports and keep records.
Three duties dey sit for the centre of the Act for any business wey e cover. Number one, identify and verify every customer through Customer Due Diligence (CDD). Number two, monitor transactions and file the correct report type with the Nigeria Financial Intelligence Unit inside the deadline wey the law set. Number three, keep customer and transaction records for at least five years. These no be suggestion. Operator wey no do dem dey face supervisory action from SCUML, and that one fit reach the point where dem withdraw the compliance certificate wey the business need to trade at all.
Why gambling operators dey caught (DNFBPs)
Betting and gaming companies dey classified under the MLPPA 2022 as Designated Non-Financial Businesses and Professions (DNFBPs). That classification put dem for the same bracket as lawyers, accountants, estate agents and car dealers — all of dem dey carry equivalent AML duties under the Act. So a licensed betting platform must identify im customers, watch transaction pattern and report to the NFIU on the same statutory basis as a bank, and on deadlines wey tight the same way. The DNFBP status na the direct legal root of every source-of-funds question wey a Naija player dey meet for a compliant platform.
SCUML, the NFIU and the EFCC — who dey enforce AML
Two bodies dey do the work, and people dey mix dem up plenty. SCUML — the Special Control Unit Against Money Laundering — na a department under the EFCC, and im job na supervision: e dey register and certify DNFBPs, issue AML compliance certificate, run inspection, and refer matter to the EFCC when enforcement needed. The NFIU (Nigeria Financial Intelligence Unit) na different animal — na the national receiver and analyst of financial intelligence. Reporting entities dey file dem reports go NFIU; NFIU analyse the data and pass intelligence go the competent authorities.
The split dey simple to remember. SCUML dey ask whether the operator dey meet im compliance obligation. NFIU dey ask wetin the transaction data itself dey show. For you as a player, the two of dem dey work behind the scene — you no dey register with SCUML and you no dey file anything with NFIU. Na the operator and your bank dey carry that load.
SCUML registration for operators
SCUML registration na mandatory before operations begin — no be something wey operator dey sort out after e don already start to take bets. Before certificate go issue, the business suppose show say e get a working AML compliance programme, named compliance officer, and the internal monitoring wey the MLPPA 2022 require. For a player, a valid SCUML certificate na baseline signal: the operator meet federal compliance requirement at the point of registration and sign up to the CDD and source-of-funds process wey the law demand. This na operator paperwork completely — no player dey file am.
Wetin operators must report — CTR, STR and CDD
Three instruments decide when a transaction comot from routine processing enter formal regulatory review. The thresholds and the deadlines na dem dey explain why a particular deposit or withdrawal fit suddenly attract question.
| Report | Wetin dey trigger am | Deadline |
|---|---|---|
| Currency Transaction Report (CTR) | Cash transactions ≥ ₦5,000,000 (individuals) / ≥ ₦10,000,000 (corporate) | Within 7 days |
| Suspicious Transaction Report (STR) | Any amount wey dem judge suspicious — no threshold at all | Within 24 hours |
| Customer Due Diligence (CDD) | At onboarding, and again at threshold transactions | Ongoing |
The CTR na the mechanical one. Once cash cross ₦5,000,000 for an individual or ₦10,000,000 for a corporate body, the report must go — no judgement call, no discretion, and e no mean say anybody suspect you of anything. The STR na the opposite: no threshold dey, and the trigger na judgement about the pattern, no be the size. A set of ₦300,000 deposits wey follow each other for one week fit raise STR while a single ₦4,000,000 transfer wey match your salary history no go raise am. The 24-hour filing window for STR show how serious the law take that one.
Reports dey filed through goAML, the NFIU platform for goaml.nfiu.gov.ng. Current status note: SCUML email submissions retire after 31 December 2025, and from 1 January 2026 reporting dey go exclusively through the SCUML/goAML portal. For a player, the practical effect of the portal-only rule na say the reporting chain don tighten — data dey structured, timestamped and easier for supervisors to trace back.
Record-keeping: minimum 5 years
Operators must keep customer and transaction records for at least five years. Na this rule explain something wey dey confuse plenty punters: a deposit wey you make since two years back fit resurface for a compliance review today, and the operator go still get the file. E no mean say dem dey suspect you. E mean say the law no allow dem to throw the record away, so when a fresh review start, old activity dey inside the picture.
Source of funds vs source of wealth — wetin a betting site fit ask you for
Source of funds (SoF) and source of wealth (SoW) no be the same thing, even though people dey use dem interchangeably. Source of funds na about this particular money: the salary wey enter your account last month, the payment from a client, the proceeds of one property sale. Source of wealth na the bigger picture — how you take build the overall money wey you get. A betting site go usually ask for source of funds. Source of wealth question dey come up for much bigger or much more unusual amounts.
Keep the difference between KYC and AML clear too, because e dey save confusion. KYC dey answer who you be — NIN, BVN, your ID document, your address. AML and source of funds dey answer a different question: where the money come from. Person fit pass full KYC identity check and still get source-of-funds request later, because the two checks dey serve two different statutory purposes.
For the Naija market, three triggers dey common: a large or out-of-pattern deposit or withdrawal, fintech wallet outflows above ₦5m, and international card transactions. Note say the ₦5m fintech flag na commonly flagged operational practice for banks and wallet providers — treat am as practice, no be as a statutory figure the way the CTR threshold be. On the document side, keep am short here: a recent bank statement, a pay slip, or proof of a one-off windfall dey usually enough. The full checklist dey live for our bank-reporting guide.
When dem most likely go ask you
The three moments wey the request dey come pass na your first big withdrawal, a deposit wey no fit your normal pattern, and money wey dey move go or comot from an offshore operator. For all three, a licensed operator wey ask for source of funds dey do normal compliance work. But make you sabi the difference between that one and an operator wey only remember say e need “one more document” after you press withdraw, then keep inventing fresh demand every week. That second pattern na stalling tactic, and we cover am for our guide on KYC abuse.
Cross-border cash and crypto — extra declarations
Cash wey dey cross the border get im own separate rule. Traveller wey dey enter or comot Nigeria with cash or negotiable instrument above US$10,000 must declare am to the Nigeria Customs Service. This one na a forex and customs requirement wey dey sit alongside the MLPPA 2022 — e no be part of the Act itself, so no mix the two. The declaration na the point; carrying the money no be offence, but failing to declare am na wetin dey cause wahala.
Crypto get im own weight. For this market USDT and crypto na offshore-only rail — no local licensed on-ramp dey for gambling — and the space dey under heavy CBN and EFCC scrutiny, with FX volatility wey dey move the naira value of a stablecoin balance from week to week. Large crypto movement dey attract attention for that reason alone, before anybody even ask which platform the money go. Na factual position this, no be legal or tax advice; where the amount serious, talk to a professional wey sabi the current rules.
How this dey protect you (and wetin to keep handy)
E easy to read AML as pure red tape wey dey slow your withdrawal down. But the same framework na wetin dey make a licensed operator traceable, dey force am keep proper record of your account activity, and dey give supervisors a paper trail when dispute happen. Operator wey no dey run these checks no dey more convenient — e dey less accountable.
The practical move na simple: keep small file of basic proof before you need am. A recent bank statement, a pay slip, or documentation of a one-off windfall cover most requests, and having dem ready dey turn a three-week compliance hold into a two-day one. For the full document checklist and how Nigerian banks and fintechs dey report, see our bank-reporting guide; for the identity side — NIN, BVN and the KYC steps — see the KYC guide. No need to reproduce the whole checklist for here.
Conclusion
Every source of funds request wey you meet for a Naija betting site dey trace back to one place: the Money Laundering (Prevention and Prohibition) Act 2022, in force since 12 May 2022, enforced through SCUML under the EFCC with reports going to the NFIU via goAML. Under that framework, licensed operators must run CDD, file a CTR on cash from ₦5,000,000 (₦10,000,000 corporate) within 7 days, file an STR on any suspicious amount within 24 hours, and keep the records for at least five years. Wetin e mean for you na practical: a large or out-of-pattern deposit or withdrawal fit trigger the question at any time, and keeping a recent bank statement or pay slip within reach na the difference between a fast payout and a long hold.
18+ | Play Responsibly. If gambling dey cause money wahala or personal problem for you, call the Gamble Alert helpline on +234 916 295 7989 or visit gamblealert.org.