EFCC and CAC Declare War on Nigeria's Unregistered PoS Sector: Ransom Payments, Money Laundering, and an 80 Per Cent Compliance Gap

The Meeting That Set the Agenda

On Thursday 25 June 2026, the boardroom of the EFCC's corporate headquarters in Abuja became the location of one of the most consequential conversations in Nigerian financial regulation this year. Senator Ibrahim Adah, Chairman of the Corporate Affairs Commission's Board, arrived with senior management staff for what was formally described as a courtesy visit to EFCC Executive Chairman Ola Olukoyede. What emerged from the meeting went considerably beyond courtesy.

Adah opened with a statistic that, when fully understood, reveals the scale of one of the most significant regulatory failures in Nigeria's digital financial services sector. Only about 20 per cent of PoS operators in Nigeria are currently registered with the CAC — meaning that approximately 80 per cent of the estimated 1.9 million agent banking operators conducting daily financial transactions on behalf of millions of Nigerians are doing so outside the legal and regulatory framework that is supposed to govern their activities. The Companies and Allied Matters Act 2020 and the CBN's Agent Banking Regulations 2026 both require unambiguously that every business operating under a business name must be registered. Most PoS operators are not. And the consequences, the CAC chairman told the EFCC, are no longer merely technical non-compliance. They are enabling organised crime.

Olukoyede's response was to match Adah's alarm with statistics of his own. Over 80 per cent of financial crimes currently investigated by the EFCC involve procurement fraud and the deliberate misuse of registered companies as vehicles for illicit transactions. An unregulated PoS sector — invisible to the formal database that law enforcement agencies rely on to trace the movement of criminal funds — is not merely a gap in the CAC's registry. It is a gap in Nigeria's entire financial crime investigation architecture. The EFCC and CAC have agreed to close it together.

The Scale of the Sector and the Scale of the Problem

To appreciate what EFCC and CAC are now confronting, the sector's size must be understood. As of March 2025, there were 8.36 million registered PoS terminals in Nigeria, with 5.90 million of those active and deployed. The agent banking network they form has become the primary cash access point for tens of millions of Nigerians — particularly in the rural and semi-urban communities where bank branches are scarce, ATM coverage is unreliable, and the mobile money infrastructure has not yet fully matured. PoS operators are, in practical terms, the financial services infrastructure of underserved Nigeria.

Their importance has grown dramatically since the 2023 naira redesign and currency crisis, when ATM queues became unmanageable and PoS terminals became the only practical way for millions of Nigerians to access the cash they needed for daily transactions. The sector has continued to expand since, with fintechs aggressively deploying agent networks to capture both transaction fees and the customer data that agent banking relationships generate. The result is an ecosystem of extraordinary scale and extraordinary regulatory opacity.

The 80 per cent non-compliance rate the CAC has disclosed means that approximately 1.5 million of the 1.9 million estimated PoS operators are conducting financial transactions without business registration, without the Know Your Customer documentation that registration enables, without the formal accountability trail that makes their activities traceable to law enforcement, and without the regulatory oversight that CAMA 2020 and CBN's own Agent Banking Regulations specifically require. In a sector handling hundreds of billions of naira in transactions monthly, that is an accountability void of enormous proportions.

The Criminal Exploitation: Kidnapping, Ransom, and the PoS Network

The most alarming specific claim in Thursday's meeting — one that Adah made based on intelligence available to the CAC — is that criminal proceeds, including ransom payments linked to kidnapping, are being routed through unregistered PoS terminals.

The operational logic of using PoS terminals to move ransom payments is straightforward and troubling. A kidnapper who has received a ransom payment via mobile transfer needs to convert that cash into physical form and distribute it without leaving a traceable financial trail. An unregistered PoS operator — one whose identity is not tied to any formal business registration, whose terminal's ownership cannot be definitively established through CAC records, and whose transaction history is visible to their fintech provider but not systematically available to law enforcement — provides exactly the kind of off-grid cash-out point that facilitates this laundering. The ransom enters the mobile money system, passes through one or more unregistered PoS operators as a series of cash withdrawals, and emerges as untraceable physical currency.

This is not speculation. Adah described it as evidence — intelligence that the CAC has accumulated and that it brought to the EFCC meeting specifically to explain why the unregistered PoS problem has moved from a corporate compliance issue to a national security one. The kidnappers and fraudsters who are exploiting these terminals are exploiting a regulatory gap that has been allowed to persist for years despite CAC's own announced enforcement deadlines.

The December 2025 CAC announcement — that effective January 1, 2026, no PoS operator would be allowed to operate without CAC registration, with security agencies enforcing nationwide compliance and unregistered terminals subject to seizure — apparently did not produce the compliance surge it was intended to create. Six months after that deadline, 80 per cent of operators remain unregistered. The January 1 deadline, like earlier enforcement announcements in 2024, passed without producing the industry-wide formalisation that the CAC intended. Thursday's meeting with EFCC is the next escalation in what has been a multi-year struggle to bring the sector into the regulatory framework.

What the Two Agencies Have Agreed to Do

Three specific areas of collaboration emerged from Thursday's meeting, each addressing a different dimension of the compliance and enforcement challenge.

The first is data and intelligence sharing. EFCC and CAC will develop a joint database of PoS operators — combining CAC's registration records with EFCC's financial crime intelligence — to create a comprehensive picture of the sector that neither agency can produce independently. The CAC Chairman specifically requested the EFCC's support in developing a reliable database of PoS operators for use by EFCC and other law enforcement agencies. This database would give investigators the ability to cross-reference suspected criminal transactions against the registration status and ownership details of PoS operators, dramatically improving the traceability of funds moved through agent banking channels.

The second area is public sensitisation. Both agencies recognise that enforcement alone will not close the compliance gap in a sector where many operators may not fully understand their registration obligations, where the registration process has historically been seen as burdensome and expensive relative to the informal operation of a PoS terminal, and where fintech companies have not always been diligent in ensuring that their agent networks comply with formal registration requirements. Joint sensitisation campaigns — communicating clearly to operators that registration is mandatory, that the legal consequences of non-compliance are real, and that the facilitation of criminal activity through unregistered terminals carries criminal liability — are the demand-side complement to enforcement actions.

The third area is a review and strengthening of the existing Memorandum of Understanding between the two agencies. An updated MoU will provide the formal legal and operational framework for sustained collaboration — replacing ad hoc cooperation with structured information-sharing protocols, joint investigation procedures, and coordinated enforcement actions that neither agency can execute effectively on its own.

The 200 Companies Already Under Investigation

One of the most significant disclosures from Thursday's meeting came from the EFCC's own side of the table. Olukoyede revealed that investigations involving approximately 200 companies previously referred to the EFCC by the CAC had produced major and what he described as very interesting findings. The details of those findings have not been publicly disclosed — they will be shared with the CAC through the formal inter-agency reporting channel that the partnership envisions — but the EFCC chairman's characterisation of them as significant confirms that the collaboration between the two agencies in addressing corporate misuse for financial crime is already operational and producing results.

The 200-company investigation figure also places the broader corporate registry compliance problem in context. The CAC referred 200 companies to the EFCC because it identified them as suspicious — as entities whose registration details, ownership structures, or transaction patterns suggested potential misuse for fraud or money laundering. The EFCC has been investigating them and has found what it characterises as considerable material. This is the corporate misuse pipeline — the registered end of a financial crime ecosystem whose unregistered PoS end is now also coming into focus.

The EFCC chairman's additional disclosure that more than 80 per cent of the financial crimes his commission investigates involve procurement fraud and the misuse of registered corporate entities underscores a point that the public discourse around financial crime in Nigeria sometimes misses. The more visible problem — unregistered PoS operators facilitating criminal cash-outs — is accompanied by an equally serious problem at the registered end of the corporate ecosystem, where properly registered companies are being used as vehicles for procurement fraud, contract inflation, and money laundering. Both problems require CAC-EFCC collaboration to address effectively, and Thursday's meeting addressed both simultaneously.

The Fintech Dimension: Enabling Non-Compliance

One dimension of the unregistered PoS problem that has received explicit attention in Nigeria's regulatory conversation is the role of fintech companies in enabling it. The CAC's December 2025 statement specifically referenced fintechs enabling illegal operations as entities that would be placed on the CBN's watchlist. The observation reflects a real dynamic: fintech companies that have aggressively expanded their agent banking networks to maximise reach and transaction volume have in some cases done so without rigorously ensuring that every agent in their network meets registration requirements.

From a commercial perspective, the pressure on fintechs to expand their agent networks rapidly — more agents means more transactions, more data, and more fees — creates an incentive to reduce the friction of onboarding, which can mean overlooking formal registration requirements. From a regulatory perspective, a fintech that deploys a PoS terminal to an unregistered operator is not merely enabling that operator's non-compliance — it is creating an accountability gap in its own network through which criminal funds can flow without adequate traceability.

The CBN's Agent Banking Regulations 2026, which Adah cited alongside CAMA 2020 as the legal foundation for the registration requirement, provide the regulatory basis for holding fintechs accountable for the compliance status of their agent networks. Whether the CBN, in coordination with EFCC and CAC, will move against fintechs whose agent networks include large proportions of unregistered operators is one of the regulatory questions that Thursday's meeting implies will be addressed as the enforcement programme develops.

Why Now: The Security and Electoral Context

Two contextual factors give the EFCC-CAC partnership its particular urgency in the second half of 2026. The first is the security situation. The role of unregistered PoS terminals in facilitating ransom payments is not merely a financial crime concern. It is a direct operational enabler of kidnapping — one of Nigeria's most acute security crises. Kidnapping for ransom has affected every region of the country and every demographic, from school children to executives to ordinary citizens travelling on the same roads as the Tomisin case last week illustrated. Disrupting the financial infrastructure that makes kidnapping economically viable for criminal groups — the ability to convert ransoms into untraceable cash quickly and reliably — is a direct security intervention, not merely a regulatory tidying exercise.

The second factor is the approach of the 2027 general elections, which makes the integrity of Nigeria's financial system — and specifically the inability of criminal actors to use unregistered financial infrastructure to move election-related funds — an increasingly salient concern for both the agencies involved and the federal government they serve.

What PoS Operators Need to Do Now

For the approximately 1.5 million unregistered PoS operators who are now directly in the sights of a EFCC-CAC joint enforcement programme, the message from Thursday's meeting is clear and urgent: register immediately.

CAC business registration for a sole proprietorship operating under a business name can be completed online through the CAC portal at cacregistration.gov.ng. The process requires a proposed business name, a description of the business activity, the personal details of the proprietor including BVN and NIN, and payment of the prescribed registration fee. The registration produces a business name certificate that satisfies the requirement under CAMA 2020 and the CBN's Agent Banking Regulations 2026.

Operators who register before enforcement actions begin are significantly better positioned than those who wait to be identified through law enforcement operations. The consequences of being found operating an unregistered terminal in the context of a joint EFCC-CAC enforcement drive could range from terminal seizure and business closure to criminal investigation if any transactions on the terminal are found to have involved illicit funds. Neither outcome is compatible with the legitimate livelihoods that most PoS operators are trying to build.

The deadline has in effect already passed. January 1, 2026 was the CAC's self-announced compliance date. The enforcement mechanism that makes that deadline real is now being assembled through the EFCC partnership. The time for waiting to see if the enforcement is serious is over.

Sources

1. P.M. News — "EFCC, CAC join forces against unregistered POS operators" (June 25, 2026)
   https://pmnewsnigeria.com/2026/06/25/efcc-cac-join-forces-against-unregistered-pos-operators/
2. Blueprint Newspapers — "EFCC, CAC join forces against unregistered POS operators" (June 25, 2026)
   https://blueprint.ng/efcc-cac-join-forces-against-unregistered-pos-operators/
3. Ripples Nigeria — "EFCC, CAC to go after unregistered POS operators" (June 25, 2026)
   https://www.ripplesnigeria.com/efcc-cac-to-go-after-unregistered-pos-operators/
4. The Point NG — "CAC, EFCC intensify crackdown on unregistered PoS operators" (June 25, 2026)
   https://www.thepointng.com/cac-efcc-intensify-crackdown-on-unregistered-pos-operators/
5. Daily Nigerian — "CAC, EFCC to begin crackdown on unregistered POS operators" (June 26, 2026)
   https://dailynigerian.com/cac-efcc-to-begin-crackdown-on-unregistered-pos-operators/
6. Nigerian CommunicationsWeek — "EFCC, CAC Raise Concerns over Unregistered PoS Operators" (June 25, 2026)
   https://www.nigeriacommunicationsweek.com.ng/efcc-cac-raise-concerns-over-unregistered-pos-operators/
7. The Digger News — "Unregistered POS Terminals Fuel Crime Proceeds — CAC Chairman" (June 26, 2026)
   https://www.thediggernews.com/2026/06/26/unregistered-pos-terminals-fuel-crime-proceeds-cac-chairman/
8. Innovation Village — "Nigeria Targets Unregistered POS Operators Over Financial Crime Risks" (June 25, 2026)
   https://innovation-village.com/nigeria-targets-unregistered-pos-operators-over-financial-crime-risks/
9. BusinessDay NG — "CAC to shut down unregistered PoS operators to curb rising fraud" (December 6, 2025)
   https://businessday.ng/technology/article/cac-to-shut-down-unregistered-pos-operators-to-curb-rising-fraud/
10. Punch Newspapers — "CAC threatens fresh clampdown on unregistered PoS operators" (December 6, 2025)
    https://punchng.com/cac-threatens-fresh-clampdown-on-unregistered-pos-operators/