In early 2026, a program officer at a development foundation in Abuja pulled up a list of health NGOs registered to operate in a target state. She needed 3 verified partners before the Q2 allocation decision. The list had come from a colleague, who had compiled it from CAC records the previous year.
She spent 2 days working through it. A third of the phone numbers were disconnected. Several rang without answer. She drove to 4 addresses on a day trip. 2 of the buildings were occupied by unrelated businesses. 1 was a private residence.
Of 28 organisations on the list, she confirmed 5 that answered a call and 3 with a functioning office. The ₦12M quarterly disbursement her foundation had earmarked for the state was due to move within the month. She had 3 organisations to show for 2 days of work.
She submitted the shortlist. The allocation moved. Whether those 3 organisations were the right ones, in the right locations, serving the communities with the deepest gaps, she could not know. The list had not given her that. Nothing had.
What the List Does Not Tell You
Throughout 2025, Nigeria’s Corporate Affairs Commission removed more than 400,000 inactive companies and NGOs from the national register. The exercise was announced publicly by Registrar-General Hussaini Ishaq Magaji, SAN, at the Commission’s 35th anniversary events in February 2026. His description was precise: the Commission had tolerated a registration bubble for years. The clean-up was overdue.
The scale of what was found is worth sitting with. According to a September 2024 investigation by The Guardian Nigeria, citing data obtained directly from the Corporate Affairs Commission, the number of incorporated trustees registered in Nigeria rose from 17,177 in 2019 to 191,278 by November 2023 — an increase of 1,014% in 4 years. That figure had circulated in sector reports as evidence of civil society growth. It was not. It was evidence of what happens when registration is cheap, verification is optional, and the consequence of filing nothing for 2 consecutive years is a status change on a portal that almost no funder checks in real time.
191,000 registered. The list looked like abundance. It was a catalogue of absences.
The program officer in Abuja was not defrauded. No one had fabricated her list. The CAC had issued it in good faith from a database that had not been meaningfully audited in years. The problem was not the list. The problem was that the list was all anyone had.
What the Numbers Cost
The EFCC’s 2024 statistical report records 4,111 convictions, the highest single-year total since the commission’s founding. Asset recoveries that year reached well above ₦248B and $105M. The most significant asset category was property. In December 2024, Justice Jude Onwuegbuzie ordered the forfeiture of over 750 duplexes and apartments covering 150,500 square metres in Abuja’s Lokogoma District — the single largest asset recovery in the agency’s history. The EFCC traced ownership back to shell foundations and linked holding structures.
The Sage Nebefeije Foundation case shows the architecture. In February 2026, an Anambra State High Court sentenced Nnaemeka Nwawka, Managing Director of Orient Petroleum Resources Plc, and the registered trustees of the foundation to 14 years each. The EFCC prosecution, which had run for over a decade, found that company funds had been routed through the foundation’s accounts and withdrawn for personal use, following a ₦25B investor petition. Foundation registration provided the scaffolding: charitable accounts, trustees on paper, no verified programme activity, no annual returns filed.
Then there is the cost that does not appear in any EFCC report. A ₦12M disbursement allocated to a state, moving to 3 organisations found through 2 days of manual checking, in a geography where 25 other registered organisations exist on paper and cannot be found in person. Whether those 3 organisations were the right partners, covering the right LGAs, addressing the gaps the foundation actually wanted to close, is a question the list cannot answer.
The fraud the EFCC prosecutes is visible. The funding that moves to the wrong place, or does not move at all, is not. Both are the same problem.
Why the System Was Designed to Fail This Way
The Companies and Allied Matters Act 2020 is not a weak law. Section 822(1) requires annual returns. Section 839 gives the CAC authority to suspend trustees, install interim managers, and freeze linked bank accounts. Following a Notice of Intention to Strike Off, entities receive a 90-day window before permanent dissolution. Assets then revert to the state under bona vacantia. The tools exist.
Enforcement did not. The gap between those two things created the precise incentive structure that produced 191,000 registered NGOs that filed nothing: registration required a one-time fee and a set of documents. Remaining registered required nothing further. An ‘Inactive’ status on a portal that almost no funder checked in real time carried no immediate cost to the organisation. The ghost NGO did not exploit a legal loophole. It exploited a cost gap.
This is the mechanism. Not corruption. Not malice. A compliance gap so long-standing that operating a shell foundation became structurally rational. The CAC’s 2025 clean-up removed the residue of that gap. It did not change the underlying cost structure for the next cycle of registrations.
Nigerian security agencies have separately raised the national dimension of this gap. The nexus between entities with charitable registration and no verifiable physical presence and the financing of instability in conflict-affected regions has been a matter of ongoing concern in parliamentary briefings. Humanitarian registration provides camouflage. Funds can move through registered structures into areas that standard financial surveillance does not easily reach, because the structures are technically legitimate and practically invisible.
Five Checks. None of Them New.
Nigeria’s removal from the Financial Action Task Force Grey List on 24 October 2025 was not a gesture. The FATF plenary in Paris confirmed that Nigeria had met all commitments in its 19-point action plan, including strengthened monitoring of non-profit organisations at risk of exploitation for terrorism financing. Maintaining that status requires ongoing proof that oversight works in practice, not on paper.
But FATF compliance is a floor, not a ceiling. The question for any funder — a program officer in Abuja, a diaspora association wiring funds from abroad, a CSR coordinator allocating a quarterly budget — is not whether an organisation’s status has been reviewed by a regulator at some point. It is whether that organisation is real, active, and working where it says it is, right now.
Five checks separate a real organisation from a ghost. Active CAC status, confirmed on the portal at the moment of the decision, not from a list compiled the previous year. SCUML registration, proof that the organisation meets the anti-money-laundering transaction thresholds that apply to non-profits. A current Persons with Significant Control register, naming the individuals with real authority over the entity. A valid Tax Identification Number and proof of tax exemption filing. A bi-annual Statement of Affairs, with deadlines of 15 January and 15 July, confirming the organisation continues to report on what it does.
None of these require new law. CAMA 2020 mandates all five. The problem has never been the legal framework. It has been the cost of checking. Running all five checks on a single organisation today involves multiple government portals, phone calls, manual document requests, and days of staff time. For a foundation officer with a shortlist of 28 organisations and a disbursement window of 4 weeks, the arithmetic does not close.
In 2025, investigators uncovered a scheme in which fraudsters used an AI-generated deepfake of prominent public figures, reported to include Aliko Dangote and Ngozi Okonjo-Iweala, to manufacture credibility for a fake training programme promising 100,000 youth placements. The operation had no physical address, no staff, and no programme. It had only a registration number and a viral social media campaign. What it was harvesting was personal data from applicants. The registration number checked out. The portal said active.
The problem was not the deepfake. The problem was that the portal had never been designed to answer the question a funder actually needs to answer: is this organisation real, and does it operate where it claims?
The program officer in Abuja submitted her revised shortlist. 3 organisations, not 28. The ₦12M moved. She filed a note in the allocation record: further verification needed before Q3.
The note is still open.
Caturity is building the verification infrastructure Nigeria’s development sector needs: a searchable registry of NGOs, a real-time map of funding gaps, and a tiered credentialing system that takes a programme officer from list to verified partner in 30 seconds, not 2 days.
Caturity is a verified registry and intelligence platform for development coordination across Africa. Phase 1 is live in Nigeria. Organisations can register free at caturity.com.