Financial services · 10 min read

Cheaper, more accurate, easy to extend: automating fraud and compliance operations

Fraud detection and investigation, AML monitoring, KYC reviews and claims, run with the controls a regulator expects.

13 October 2026 · AgenticAuto

It is 8:10 on a Monday. The overnight queue holds 1,412 alerts. Most will turn out to be nothing, but each one still needs an analyst to pull the transactions, check the device, look up the beneficiaries and read the customer's file before deciding. Somewhere around number 900 is a real mule account, still moving money. Down the corridor, a backlog of KYC reviews is overdue, and a customer has been waiting a week for a claim.

Every financial institution knows this work. It is the most expensive part of fighting fraud and staying compliant, and it is still mostly done by hand.

₦25.85bn

lost to fraud by Nigerian financial institutions in 2025, across 67,518 cases.

NIBSS, 2026

90%+

of transaction-monitoring alerts at most banks are false positives.

McKinsey

$3.8bn

in AML, KYC and sanctions penalties worldwide in 2025.

Fenergo, 2026

Why hasn't this been automated? Because the work needs judgement, which robots that copy clicks on a screen cannot provide. And it needs proof, which AI chatbots cannot give. No regulator will accept "the AI decided".

The goal is not to let AI decide. It is to make sure every decision is made faster, by the right person, with the evidence in front of them.

MadeEasy is an AI operations platform. A team describes how a process works, in plain language or with its procedure manual, and MadeEasy builds the AI agents, rules and connections that run it, proves them on real past cases, and runs the process every day. It works in any industry. Here is what it does in fraud and compliance.

1. Fraud detection, at bank volume

MadeEasy connects to the bank's transaction feeds and scores transactions as they arrive, against the bank's own rules and fraud models: velocity, unusual amounts, new beneficiaries, device changes, known bad accounts. Scheduled sweeps look across days and weeks for what a single transaction cannot show, such as mule networks, structuring and money moving in and straight out.

Scoring runs as ordinary software, so every transaction can be checked at very low cost. AI is used only on what is flagged. Suspicious accounts can be restricted under the bank's fraud desk procedure, with the fraud desk's approval. MadeEasy works alongside the bank's existing fraud controls rather than replacing them.

OVERNIGHT ALERTS · RANKED BY RISK1,412 alertsALR-88213₦4,850,000 to 6 new beneficiaries in 40 minHighCase readyALR-88190Device change, then a ₦2,100,000 transferHighCase readyALR-88177Round amounts in and out the same dayMediumCase readyALR-88152Salary credit above usual rangeLowEvidence attachedALR-88140Known beneficiary, usual time and amountLowEvidence attachedAnalysts start at the top, with each case already assembled.Scored by the bank's rules and models in code. Nothing is closed without a person.
Every alert is scored and ranked, with its case already assembled. Analysts start where the risk is. Illustration.

How a fraud detection process is set up in MadeEasy

Fraud moves fast. In Nigeria most transfers settle in seconds over NIBSS Instant Payment, and stolen funds typically pass through a chain of mule accounts within minutes to hours. So the work that recovers money happens in the minutes after a transfer posts: spotting the mule account, restricting it, alerting the other banks, and reporting. That is where MadeEasy works. The decision to approve a card payment at the till stays with the bank's in-line authorisation system.

Regulation sets the clock:

Under 30 minutesThe fraud response time the industry agreed under the Nigeria Electronic Fraud Forum, announced by the CBN in January 2026 [ThisDay]
24 hoursThe longest a BVN may stay on the CBN's temporary fraud watch-list while its owner is contacted (CBN circular, March 2026) [Nairametrics]
24 hoursTo file a suspicious transaction report with the NFIU on goAML once a transaction is found suspicious (Money Laundering Act 2022, section 7) [Legal500]
10 September 2027The date by which deposit money banks must run automated AML systems covering transaction monitoring, case management and regulatory reporting (CBN circular, 10 March 2026; other institutions by March 2028) [DLA Piper]

The bank's fraud team describes the process in its own terms. For example:

"Monitor every inward and outward NIP transfer as it posts. Flag an account that receives money from many unrelated senders and moves most of it out within minutes, a high-value transfer to a first-time beneficiary straight after a SIM or device change, or anything our fraud model scores above our threshold. For a flagged account, ask the fraud desk to approve a post-no-debit restriction, alert the other bank's fraud desk, and open a case. If the analyst confirms fraud, watch-list the BVN and draft the suspicious transaction report for compliance to file on goAML."

From that description, MadeEasy builds the process below.

THE PROCESS MADEEASY BUILDS FROM THAT DESCRIPTIONA transfer postsinward or outward, as it happens, from core banking and NIP1. Check the fraud typologiesfan-in and fan-out, rapid in-and-out, SIM or device changeCode2. Score with the fraud modelthe bank's validated model, or one we buildModelFlagged?NoPosts normally; its score is kept on recordYes3. Fraud desk approves restrictionpost-no-debit; the other bank is alertedPerson4. Gather evidence and write the caseflows, devices, linked accounts, KYC and BVNAI5. Analyst confirms or clearsconfirmed fraud: BVN watch-listedPerson6. Draft the STRfor compliance to file on goAML in 24 hoursAIEvery step is timed and recorded, and every action has a person's approval on it.Who does each step:Codeexact every timeModeltrained fraud modelAIreads and writesPersondecides
Each step is done by the right kind of worker: code for exact checks, a trained model for scoring, AI for reading and writing, and a person for every action and decision. Illustration.

Setting it up takes five steps:

  1. Connect the data. Postings from core banking and NIP, channel and device logs, and the customer's KYC and BVN details, read through the bank's own interfaces.
  2. Write the typologies as rules in code. From the bank's fraud policy and the NFIU's red-flag indicators: money fanning in from many senders and straight out again, balances left near zero, amounts kept just under thresholds, a SIM or device change before a high-value transfer. Each rule is reviewed before it is used, and the same transfer always gets the same result.
  3. Add the model and set the thresholds. The bank's own validated model, or one we build from its labelled past cases. Thresholds are tuned on past alerts to balance missed fraud against the alert volume the team can handle, and scores are watched for drift.
  4. Tie every action to the fraud desk's procedure. A post-no-debit restriction only with the fraud desk's approval, the alert to the other bank, the BVN watch-list, the case and the report draft: each one logged with who approved it and when.
  5. Back-test before go-live. Replay months of past transactions, including confirmed fraud and clean activity. The gate refuses go-live until the process catches the known fraud within an alert volume the team can work.

Once live, the typologies change as fraud changes. "Flag accounts opened in the last 30 days that receive more than ₦2 million from over ten senders in a day" is described, back-tested, approved and released as a new version.

2. Investigation and reporting

For every alert, whether raised by MadeEasy or by the bank's existing systems, MadeEasy gathers the evidence: the transactions, the device, the beneficiaries, the customer's KYC file and past alerts. It writes the case in plain language, citing that evidence, with a recommendation and its reasons.

The analyst reviews a complete case instead of assembling one, and decides: close it, or escalate. When a case is escalated, the suspicious-transaction report is drafted for the compliance officer to review and file. Nothing is closed or filed without a named person.

Case ALR-88213 · Possible mule activityHigh riskSUMMARY₦4.85m came in from 11 unrelated senders and left within 40 minutes, to sixbeneficiaries, three opened this week. The balance is now ₦12,400.EVIDENCETransactions17 in, 6 out, 09:12 to 09:52Beneficiaries3 of 6 accounts under 7 days oldDeviceNew device, first seen todayKYC fileLow-income profile; flows 40× usualRECOMMENDATIONRestrict the account (post-no-debit), alert the sending banks, draft the STR.Confirm and escalateCloseAwaiting analyst decision
The case arrives written, with its evidence and a recommendation. The analyst decides. Illustration.

3. KYC and customer due diligence

MadeEasy reads identity documents, utility bills and statements, including photos customers send from their phones, and checks each one: does the name match, is the document current, is the address consistent, does the income fit the profile? It reviews screening results, schedules periodic refreshes, and asks the customer for anything missing. Only the exceptions reach a compliance officer.

CUSTOMER FILE · PERIODIC KYC REVIEWIdentity cardName matches the applicationPhoto present and clearValid until 2029Utility billAddress matches!Issued within 3 monthsBank statementName and account matchIncome consistent with profile1 exception: the utility bill is 5 months oldSent to the customer for a newer bill, and to a compliance officer. Everything else is cleared.
Each document is checked; only the exception reaches a compliance officer. Illustration.

4. Claims, prepared for a fast decision

For insurers and bancassurance teams, claims arrive by email, app or website with photos and documents. MadeEasy checks them against the policy terms, flags indicators of fraud, and prepares each claim for a decision. Straightforward claims go for approval in hours; complex ones reach an adjuster with a complete file.

5. Customer service on any channel

One assistant, trained on the institution's approved policies, answers customers on whichever channels it chooses: website, email, WhatsApp, its mobile app or internet banking. It can read a photo of an error screen or a document, and when a customer needs a person, such as for a complaint or a dispute, it hands over with the full conversation.

What changes, in one table

TodayWith MadeEasy
Fraud detectionRules run in separate systems; patterns across days are spotted late, if at allEvery transaction scored in code; sweeps for mule networks and structuring; restrictions raised for the fraud desk to approve
Alert investigationAnalysts spend most of each alert gathering evidence from several systemsEvery alert arrives with its case assembled and ranked by risk; analysts decide
Suspicious-transaction reportsWritten from scratch, case by caseDrafted from the case file for the compliance officer to review and file
KYC reviewsFiles checked page by page; refreshes fall behindDocuments checked automatically; only exceptions reach a person; refreshes on schedule
ClaimsDays of document checks before a decisionChecked against policy terms and prepared for a decision in hours
What the regulator seesCase notes, emails and memoryEvery step recorded, with its evidence, the person who decided, and when

Which of these costs your institution the most today?

Talk to us about it

Cheaper: what automation really costs

The licence is the smallest part of a traditional automation bill. Forrester found that for every dollar spent on the software, $3.41 went on services to make it work: building the robots, maintaining them, and repairing them when the applications they click through change. EY has found that 30 to 50% of initial projects with traditional robots fail. And single-purpose tools for fraud cases, KYC and claims each come with their own contract and integration.

Ten automated processes, for one yearSoftwareWhat comes on top
A traditional automation robot, at a major vendor's published price for an unattended robot [1]$150 per bot a month, so $18,000 a year for tenAt Forrester's ratio, about $61,000 more in services to build and maintain them [2]
A leading automation suite, median contract [3]$45,338 a year (median of 42 purchases; range $22,440 to $223,821)Developers, infrastructure and maintenance
MadeEasy Cloud, Team plan$90 a month, so $1,080 a year for up to ten processesAI usage at cost, only for the steps that need AI

List prices and published contract data; actual contracts vary with volume and negotiation. A process may need more than one robot in traditional automation; we assumed one.

MadeEasy costs less for structural reasons, not because of a discount:

  • One platform for every process. Fraud, KYC, claims and service run on the same platform, with one record and one contract.
  • Volume work costs almost nothing. Scoring, matching and arithmetic run as software. AI is used only where reading, judgement or writing is needed.
  • No months of development. A process starts from a description of the work, not from a developer recording clicks.
  • No mark-up on AI. MadeEasy uses your own account with your AI provider, and shows you the cost of every task.
  • Less to repair. MadeEasy works with your systems' data, not by clicking through screens, so a new screen layout does not break it. A change is described, tested and approved, not rebuilt.

What could it give back to your team?

Use your own figures. Nothing below is our estimate of your institution.

0

analyst hours a year back for decisions

0

a year in analyst time, put to real risk

Alerts arrive every day, so this uses 365 days a year. It counts only the gathering and writing MadeEasy does before the analyst decides.

More accurate: proof, not promises

The question to ask of any automation in fraud and compliance is not "is it clever?" but "can we prove it did the right thing?" MadeEasy answers that in four ways:

  • Rules and calculations run in code, not AI. Scores, thresholds and totals give the same result every time. Where AI is used, the reason is written into the design.
  • Nothing goes live without passing its tests. Each process is tested on real past cases, including the hard ones, and can only be switched on through a gate that refuses if any test fails. The tests run again after every change.
  • People make the decisions. Closing an alert, filing a report, approving a claim: each waits for a named person, and their decision is recorded.
  • Every step is on record. What each step received, what it did, what it produced and who approved it, ready for an auditor or regulator, and replayable from start to finish.
TEST CASESMatches a clean day exactlyFlags an amount mismatchHolds a duplicate entryNever releases without approvalAll 12 test cases passedGo-live gaterefuses if anytest failsLive
A process goes live only through a gate that checks its tests. Illustration.

Easy to extend: the next process is configuration, not a project

The real cost of automation is rarely the first process. It is the tenth, when every change needs another project.

In MadeEasy, a new process starts from a description of the work, or from the procedure your team already follows. MadeEasy proposes the steps, checks each one against the systems it will use, and shows you the design before anything is built. Changing a process works the same way: "escalate any transfer above ₦5 million to a second reviewer" is described, shown, tested and approved. Connections built once, to the core banking system, the card platform or the screening service, are reused by every process after it.

Fraud detection, KYC, claims, disputes, reporting: one platform, one record, and the tenth process as easy as the first.

Questions your board will ask

Does it replace our fraud system?

No. MadeEasy works alongside it. It takes your existing alerts, adds its own detection rules, models and pattern sweeps, and runs the investigation and reporting work that follows.

What will our regulator say?

MadeEasy gives you the evidence a regulator looks for: tests that had to pass before go-live, a named person behind every decision, a written reason wherever AI is used, and a step-by-step record of every case. It can also run entirely on your own infrastructure.

What if the AI gets something wrong?

AI does not score, total or decide; code scores and people decide. Where AI writes a case or reads a document, its work is checked against your test cases before go-live, and every case it writes cites the evidence behind it.

Where does our data go?

On a self-hosted plan, nowhere outside your environment. Credentials are encrypted for each process, each organisation's data is kept separate, and AI runs on your own account with the provider you choose.

What happens to our analysts?

They stop gathering and start deciding. The evidence collection and case writing move to software; your people spend their time on the cases that are real.

How long until we see a result?

A first process can be designed and tested in days. We recommend running it alongside your team for several weeks before relying on it. The plan below fits in 90 days.

A 90-day plan

  1. Weeks 1 to 2

    Choose and describe. Pick one costly process, such as fraud alert review. Share the procedure and a set of past cases. MadeEasy drafts the design; your team reviews it.

  2. Weeks 3 to 4

    Connect and test. Connect the systems it needs, and test it on real past cases, including the hard ones. It must pass them all.

  3. Weeks 5 to 8

    Run alongside. It runs on live alerts next to your analysts, who still decide. Compare speed, accuracy and cost every day.

  4. Weeks 9 to 12

    Go live, then the next one. Switch it on with sign-offs in place, and start KYC, claims or disputes on the same platform.

Prefer us to build it?

We can build the process with your team at a fixed price agreed before we start, then hand it over running. The price depends on how complex it is:

BuildTypical examplePrice
SimpleCustomer service on your website and email, answering from your policies$125 (₦150,000)
MediumKYC document review with exceptions to compliance$500 (₦600,000)
ComplexFraud detection and investigation connected to your core systemsfrom $1,250 (from ₦1,500,000)

One-off, per process, including tests, a run alongside your team and 30 days of support after go-live. Delivery is often faster when everything the process needs from outside MadeEasy is ready at the start: access to your systems, sample files, and the people who sign off. See pricing for what each level covers.

Your data, your rules

MadeEasy can run as a service, or on your own infrastructure, in your own data centre or cloud region. Customer data then never leaves the environment you control, which supports your obligations under data protection law and your own risk policies.

Sources

  1. NIBSS fraud figures for 2025, reported by TechEconomy, June 2026.
  2. "The investigator-centered approach to financial crime", McKinsey.
  3. Fenergo, regulatory penalties in 2025, January 2026.
  4. CBN on the 30-minute fraud response time, ThisDay, January 2026.
  5. CBN circular on the BVN fraud watch-list, Nairametrics, March 2026.
  6. Compliance requirements for the NFIU, Legal500 (Money Laundering Act 2022, section 7).
  7. CBN Baseline Standards for Automated AML Solutions, DLA Piper Africa, April 2026.
  8. Fraud monitoring obligations in Nigeria's payment system, SRJ Legal.
  9. A major vendor's published price for an unattended robot, $150 per robot a month.
  10. "4 surprising RPA research findings from Forrester", CIO, December 2019.
  11. Published contract data for a leading automation suite, median annual value across 42 purchases.
  12. An automation vendor's analysis of why projects fail, citing EY.
  13. MadeEasy pricing.

Which process would you automate first?

Tell us about it. We will show you how it would run in MadeEasy, with its tests and controls.