Picture a payments team six months after launching a Nigeria corridor. Volume is up, the app store reviews are good, and then a partner bank sends three requests in one email: the AML policy, the screening record for a flagged transfer from March, and confirmation of where recipient data is stored. The answers exist somewhere, across a spreadsheet, a vendor dashboard and one engineer's memory. Settlement slows while the team pieces them together. That is what cross-border payments compliance looks like when it is added after growth instead of built before it.

Compliance is cheapest on day one. Every control you design into the payout flow early is one you never have to retrofit across live traffic, migrated data and a customer base that expects money to keep moving while you fix things.

This article covers why compliance gets harder as you grow, the controls worth building before volume arrives, the rule changes already scheduled, and the questions to put to any payout partner before you sign.

Why compliance gets harder as you grow

Small volumes hide weak controls. A team processing a few hundred payouts a week can review exceptions by hand. At tens of thousands, the same gaps turn into backlogs, missed alerts and a partner relationship under strain.

The banks you depend on are also less forgiving than they used to be. BIS correspondent banking data shows the number of active correspondents in Africa fell 34.2% between 2011 and 2022, and active USD correspondents fell 40.9%. The relationships that remain come with closer scrutiny of who you are, who your customers are and how you monitor them.

Country risk moves too. The FATF placed Nigeria under increased monitoring in February 2023 and removed it on 24 October 2025. Kenya was added in February 2024 and remained under increased monitoring in the FATF's June 2026 update. A grey listing does not stop money moving, but counterparties apply more due diligence to flows touching that market, and they expect your records to stand up to it.

What it means for operators: your compliance posture is part of your product. The partners who settle your payouts are assessing it continuously, and the stronger it is, the fewer reasons they have to slow you down.

The controls to build in before volume arrives

None of these are exotic. The difference between teams that scale cleanly and teams that stall is whether these controls sit inside the payout flow or beside it.

Know who you are dealing with

KYC on senders and KYB on business customers need to happen before the first payout, with the evidence stored against the account. Retrofitting KYB onto business clients who have been transacting for a year is slow, awkward and commercially painful.

Screen before the money moves

Sanctions and watchlist screening has to run before settlement, not after. A transfer that is screened once it has landed is a transfer you can no longer stop. Build the screening step into the payout path so a match holds the payment and creates a case, rather than producing a report someone reads the next morning.

Monitoring people can act on

AML and CFT monitoring is only useful if the alerts reach someone with the authority and context to decide. Define who reviews what, how quickly, and what happens to the payout while a decision is pending. Write it down. A regulator or bank partner will ask.

An audit trail you can export

Every payout should carry a full history: who initiated it, what checks ran, what they returned, and when it settled. If producing that record for one transaction takes an afternoon, a bank partner asking for a sample of five hundred will be waiting a very long time.

Data protection by design

Nigeria's Data Protection Act 2023 restricts transfers of personal data outside the country unless there is a legal basis, and KPMG's summary of the Act notes the top penalty tier can reach the higher of ₦10 million or 2% of annual gross revenue in the preceding financial year. Decide early what recipient data you collect, where it lives, who can see it and when it is deleted.

Cross-border payments compliance rules are still moving

Building early also means building for rules that are already on the calendar.

In June 2025 the FATF revised Recommendation 16 on payment transparency. For peer-to-peer cross-border payments above USD/EUR 1,000, a standard set of information (name, address, date of birth) should travel with the payment message, and institutions are expected to use tools such as verification of recipients' banking information. The changes come into effect by the end of 2030. If your data model cannot carry those fields today, that is a migration you can plan now instead of rushing later.

Licensing requirements tighten as well. The Central Bank of Nigeria's revised IMTO guidelines, released on 31 January 2024, set minimum operating capital of $1 million for foreign entities and limited IMTOs to inbound transfers, as BusinessDay reported. Requirements like these are why many teams choose to work through a licensed partner rather than hold every licence themselves, a trade-off we cover in what a licensed payout partner unlocks.

What it means for operators: treat regulation as a roadmap item with dates, not a surprise. The teams that read the rule changes early get to implement them on their own schedule.

What to ask your payout partner about compliance

Your payout partner's compliance becomes part of yours. Before you sign, ask:

1. Which licences do you hold, in which markets, and where do you rely on licensed local partners?

2. Do you screen every transaction against sanctions and watchlists before settlement, or after?

3. What KYB do you run on us, and what KYC do you require on our end users?

4. Can you export a complete, audit-ready record for any payout on request?

5. How do you handle recipient data, and which data protection laws do you align to?

6. Will you provide licensing and AML documentation our own regulators and banks can review?

A partner who answers these with documents rather than adjectives is one you can build on.

How Chrisborough approaches compliance

Chrisborough puts compliance in the rail, so the controls run on every payout, inside the flow itself.

We operate as a CBN-Licensed International Money Transfer Operator in Nigeria and work through licensed local partners across our other markets. We are registered with the Special Control Unit Against Money Laundering. AML and CFT processes are embedded into every payout, and we run KYC and KYB checks on partners and, where required, end users. Every transaction is screened against sanctions, watchlists and risk indicators before settlement.

Data is encrypted in transit and at rest, access is role-based with least privilege by default, and payment information is handled to PCI-DSS standards across the payout flow. We handle partner and end-user data in line with the Nigeria Data Protection Act 2023 and the NDPC's GAID 2025. Every transaction is logged and exportable for reconciliation, and regulatory documentation is available to verified partners on request through our Trust Center.

Controls only matter if payouts still land. That is why we hold ourselves to a 99% payout success rate alongside them, a standard we explain in why payout reliability decides who survives.

The bottom line

Compliance built before scale is a set of design decisions. Compliance built after scale is a remediation project, run while customers wait. The cost of the first is a few weeks of careful work at the start. The cost of the second can be a frozen settlement account at the worst possible moment.

Build the controls into the flow, keep the records exportable, plan for the rules already announced, and choose partners whose compliance posture you would be happy to inherit.

Schedule a discovery call and we will walk your compliance team through our licensing, screening and documentation for the NGN, GHS and KES corridors.

About Chrisborough: a CBN-Licensed International Money Transfer Operator providing payout infrastructure across the NGN, GHS and KES corridors, operating through licensed local partners in Ghana and Kenya. Fintechs, remittance operators and USD senders use Chrisborough to move money into Nigeria, Ghana and Kenya with a 99% payout success rate, local payout reach and a transparent spread per corridor.

Related reading: What a Licensed Payout Partner Unlocks and The Operations Playbook for Reliable Payouts.