NFIU Filing

goAML submission windows — filing deadlines for Nigerian institutions

The MLPPA 2022 sets strict filing deadlines for STRs, CTRs, and FTRs submitted via goAML. Each report type has a different submission window, and the window starts at different points. Missing a submission window is a regulatory breach — the filing obligation does not expire, but the late submission creates examination exposure.

Submission deadlines at a glance

Report typeTrigger eventSubmission window
STR — Suspicious Transaction ReportDetection of suspicious activity by compliance officer96 hours from detection
CTR — Currency Transaction ReportCash transaction meets or exceeds NGN 5M (individual) / NGN 10M (corporate)7 days from transaction date
FTR — Foreign Transfer ReportInternational transfer above USD 10,000 equivalent1 day (24 hours) from transaction date

When the STR clock starts

The 96-hour STR window begins from the point at which the compliance function detects or identifies suspicious activity — not from when the transaction occurred. This is an important distinction. A transaction may have occurred days or weeks earlier. The submission clock starts when the institution, through its transaction monitoring or case management process, identifies that a transaction gives rise to reasonable suspicion.

Internal escalation steps — such as obtaining senior officer approval before filing — do not pause the clock. Institutions must ensure their internal escalation procedures can be completed well within the 96-hour window, not at the end of it.

When the CTR clock starts

The 7-day CTR window runs from the date of the transaction. It does not depend on any internal escalation or decision — the obligation is automatic once the cash threshold is met. Institutions must have systems that identify threshold-crossing transactions promptly so that the 7 days are not consumed by delayed internal identification. A batch process that identifies CTR-eligible transactions once per week will routinely miss the deadline for transactions that occur early in that window.

When the FTR clock starts

The 1-day FTR window is the tightest of the three. It starts from the date of the international transfer. Given that FTR is a volume-based, non-discretionary report (like CTR), institutions with significant international payment volumes need automated FTR identification and submission processes. Manual FTR filing at this turnaround is not viable for any institution with more than a handful of qualifying transactions per day.

The correction window

When the NFIU rejects a report, a 24-hour correction window opens from the time the rejection notice is issued. This window applies to all three report types. The institution must correct the identified errors and resubmit the report under the original reference number within this 24-hour period. The correction window does not extend the original submission window — if a report is rejected after the original deadline has already passed, the correction still creates a late-filing record.

Consequences of missing a window

  • Late STR filing is a criminal offence under the MLPPA 2022 — it is not merely a regulatory breach
  • The CBN records late filing patterns during on-site AML examinations
  • Persistent late filing is treated as evidence of a systemic compliance programme failure
  • Late CTR filings may indicate a failure to monitor transactions in near-real time
  • Missed FTR windows can trigger enhanced scrutiny of the institution's international payments controls
  • Individual compliance officers carry personal regulatory exposure under the CBN's 2026 circular

Frequently asked questions

Does the submission window apply on weekends and public holidays?
Yes. The MLPPA 2022 deadlines are calendar-based, not business-day-based. A suspicious transaction detected on a Friday afternoon must still be reported within the applicable window even if that window spans a weekend. Institutions must have on-call or weekend coverage arrangements for urgent STR filings.
What should I do if goAML is unavailable when I need to file?
If the goAML platform is unavailable due to a system outage, the institution should document the outage (including screenshots or NFIU helpdesk communications) and file as soon as the platform is restored. Institutions should notify the NFIU directly if an outage prevents timely filing. Evidence of the outage and the notification should be preserved for examination purposes.
Can multiple transactions be combined in a single CTR?
Yes. Multiple cash transactions by the same customer that are related — for example, multiple deposits on the same day that together exceed the threshold — can be combined in a single CTR. The report should clearly identify each constituent transaction, its date, and its amount. The 7-day window runs from the date of the first transaction included in the report.

Free resource for Nigerian compliance teams

The NFIU STR/CTR Rejection Codes Reference Guide — every common goAML rejection explained with root causes and fixes.

Download the free guide