Sterling pairs disciplined regulatory controls with the speed our customers expect. This is where we set out how we protect deposits, screen risk, and earn trust on every transaction.
Each area below works as one connected system. Open any card to see how the discipline behind it actually operates.
A bank can be fast or it can be careful — the assumption is you choose one. We've built the operating model so that controls are part of the rail, not a toll booth bolted on after.
Independence keeps judgement honest, a risk-based lens puts effort where exposure is greatest, and automation handles volume so people can focus on the cases that need a human.
Compliance reports to the Board, not to the business lines it reviews. That separation is what lets it say no.
Scrutiny scales with exposure. Routine activity moves freely; higher-risk relationships get deeper review.
Systems screen everything at volume. Specialists spend their time only where a judgement call is required.
Every employee is trained to spot and raise risk. Controls hold because the behaviour around them does.
Oversight sets the mandate, commitments translate it into standards, and operational controls put it to work every day.
Sets risk appetite and holds management to account.
Owns the programme and reports independently to the Board.
A documented rulebook reviewed and re-approved annually.
Active dialogue with the CBN, NFIU and data protection authority.
Continuous, automated review of transactions.
Identity, sanctions and counterparty checks.
Regulatory returns and independent testing.
The obligations are real and external. Here's what each one means and the evidence that we live up to it.
We operate to the Central Bank of Nigeria's AML/CFT regulations and report to the Nigerian Financial Intelligence Unit. The programme spans onboarding, monitoring, investigation and disclosure.
Processing is mapped to the Nigeria Data Protection Act 2023 and overseen by a designated Data Protection Officer. Customers keep the right to access, correct and question how their information is used.
Our information security management system is certified to ISO/IEC 27001 — meaning an external auditor, not just us, has tested how we protect the confidentiality and integrity of customer data.
Counterparties and payments are screened in real time against OFAC, UN, EU and domestic lists. Potential matches are held automatically and cleared only after a trained analyst adjudicates them.
Everything above protects the system. This part protects you directly — practical guidance you can act on today, with no jargon and nothing to sign up for.
No genuine staff member — from Sterling or anyone else — will ever ask you to share a one-time passcode (OTP). That code is the key to your account.
If a caller asks for it, they are not who they say they are. End the conversation and report it.
Key policies, notices and reporting channels behind Sterling's compliance programme. Filter to find what you need.
Sterling's statement on preventing bribery, corruption and improper business conduct.
Policy statement for anti-money laundering, counter-terrorism financing, proliferation financing and sanctions controls.
Customer-facing anti-fraud guidance and prevention support.
Public notice on anti-money laundering, counter-terrorism financing and counter-proliferation financing obligations.
Confidential channel for raising concerns and reporting wrongdoing.