Bureau de Change (BDC) Software in Nigeria — CBN-Compliant Transaction & Reporting System
Custom operations software for licensed Tier-1 and Tier-2 bureaux de change — KYC and BVN capture, buy/sell transaction recording, rate boards, till and branch cash control, AML flagging, a tamper-evident audit trail and CBN returns rendition, built by Musskart.
250+
Projects Delivered Since 2020
Asaba + Abuja
HQ In Asaba, Abuja Office
Since 2020
Registered Nigerian Company
Tier-1 & Tier-2
Built For Both BDC Categories
We reply on WhatsApp within minutes. Send your licence category and branch plan and we will scope your BDC system the same day.
BDC Software Built for Nigeria's New Regulatory Regime
If your company has just been licensed as a bureau de change — or is deep in the application — the business you are entering is nothing like the BDC business of five years ago. The Central Bank of Nigeria's Regulatory and Supervisory Guidelines for Bureau De Change Operations in Nigeria, revised in 2024, rebuilt the sector around two categories, far higher capital, tighter conduct rules and a real technology obligation.
A cash book and a shared spreadsheet cannot carry that. When an examiner asks for six months of history by customer, currency, branch and cashier — with the identification captured at the counter attached to every record — operators running a proper BDC management system simply press export.
Musskart Technology Limited builds custom bureau de change software in Nigeria: KYC, ID and BVN capture, multi-currency buy and sell recording, rate boards, receipts, till and branch cash control, an AML engine with CTR and STR workflows, a tamper-evident audit trail, multi-branch consolidation and the periodic returns your compliance officer files. We are a registered Nigerian company with 250+ projects delivered since 2020.
What the New CBN Regime Demands of a BDC's Systems
The 2024 guidelines changed what a bureau de change must be able to prove. Read the obligations as system requirements:
Two tiers, two footprints
The revised guidelines create Tier-1 and Tier-2 BDCs with far higher minimum capital than the old regime — widely reported at ₦2 billion and ₦500 million — plus application, licensing and caution-deposit requirements. Tier-1 may run a national footprint with branches and franchisees; Tier-2 is limited to a single state and a capped number of branches. Confirm current figures with the CBN; your software must reflect the footprint you are licensed for.
Know-your-customer at the counter
Every transaction must tie to an identified customer — valid identification, BVN where required, purpose of transaction, and a record you can retrieve years later. Identity capture therefore has to sit inside the transaction flow, not in a side register nobody updates.
Transaction-level record keeping
Buys and sells must be recorded individually with currency, rate, Naira value, counterparty, channel and timestamp, and retained for the statutory period. Aggregated daily totals will not help when an examiner asks you to trace one transaction.
AML/CFT as a live control
BDCs are reporting entities under the Money Laundering (Prevention and Prohibition) Act 2022 and the Terrorism (Prevention and Prohibition) Act 2022: SCUML registration, a designated compliance officer, customer due diligence, and currency and suspicious transaction reports filed with the Nigerian Financial Intelligence Unit. Your system must surface those cases.
Returns rendition on a schedule
Licensed BDCs render periodic returns on their operations to the CBN electronically, in the prescribed format and by the deadline. Late or malformed returns are a supervisory problem in their own right, so reporting must be generated from live data rather than rebuilt monthly in Excel.
Money on traceable rails
The regime pushes activity onto traceable rails — proceeds settled through bank accounts rather than opaque cash, sourcing rules for foreign exchange, and conduct restrictions on what a BDC may do. Your software must record the settlement leg alongside the trade so the two reconcile.
Together these obligations describe a piece of software. A generic point-of-sale package stretched to fit is how operators end up with records that cannot answer a regulator's question. For the same logic applied to a deposit-taking institution, see our guide to microfinance and core banking software development.
Core Modules We Build Into a BDC Management System
Take the modules your licence category and branch plan need; add the rest as you grow.
1. Customer onboarding — KYC, ID and BVN capture
One record holds name, address, contact details, ID type, number and expiry with a scanned copy, photograph, purpose of transaction and BVN where required — deduplicated, risk-rated, and linked to every transaction that customer ever does.
2. Buy and sell transaction recording
Cashiers post a buy or sell in seconds: currency, foreign amount, applied rate, automatic Naira equivalent, customer, settlement method, branch, till and cashier, across every pair you deal in. Nothing is editable after posting — corrections are approved reversals with a reason.
3. Rate boards and rate control
Rates set centrally per currency with optional branch overrides and margin limits, pushed to the counter and to a customer-facing display. Every change is versioned with who and when, so any transaction can be checked against the rate that was live.
4. Receipts and customer documentation
Serialised, branded receipts printed or sent digitally, carrying reference, currency, rate, Naira value, date, branch and cashier. Reprints are logged and the series is gap-checked — exactly the control an examiner looks for.
5. Till, vault and branch cash position
Open and close each till with counted balances in Naira and every currency held; record top-ups, transfers, vault movements and bank lodgements; close the day on an automatic expected-versus-counted reconciliation. Variances need an explanation and an approval.
6. AML engine — CTR, STR and case management
The engine aggregates each customer's activity across dates and branches, applies configurable thresholds aligned to the Money Laundering (Prevention and Prohibition) Act 2022, and alerts on structuring, unusual frequency and watchlist or PEP matches. Cases route to your compliance officer with an evidence trail.
7. CBN returns rendition
Templates configured to your reporting calendar, generated from the live ledger, exported in the accepted file types and archived with the figures and timestamp of each submission — so you can show precisely what you filed and when.
8. Audit trail and role-based access
Every login, transaction, reversal, rate change, cash movement, approval and export lands in an append-only log with user, device and timestamp. Roles are granular and maker-checker approval is enforced, so a cashier cannot change rates.
9. Multi-branch consolidation
Head office sees turnover, position, margin, cash on hand and open compliance cases per branch in one dashboard; branch users see only their own. Tier-2 runs a single state cleanly, Tier-1 scales to a national network.
10. Reporting, dashboards and exports
Daily transaction summaries, currency-wise volumes, margin and profitability, customer activity, teller performance, exception and variance reports, and a transaction search filtered by date, branch, currency, cashier, customer or amount — exporting to Excel, CSV and PDF.
Integration Points — Portals, Banks and Monitoring Systems
A BDC system does not live alone. These are the connection points we plan for during scoping.
CBN returns and monitoring submissions
The CBN has moved the foreign exchange market steadily toward electronic recording and monitoring of transactions, so your data must be extractable in structured, transaction-level form on demand. We build the export and submission layer to the specification your compliance officer is given, keep field mapping configurable and version every submission. Where the CBN prescribes a platform or file layout, that specification governs.
BVN and identity verification
BVN and ID checks run through a licensed verification provider or your bank's approved channel, with the result and reference stored against the customer record. We integrate the provider you are contractually entitled to use — we do not claim direct access to any national identity database.
Banks, settlement and NFIU output
Transfers and lodgements are recorded against the trade, reconciled automatically where your bank offers APIs and by clean statement import where it does not. Currency and suspicious transaction reports are prepared in the structure your compliance officer files with the NFIU, with the case file attached.
Accounting, messaging and your own API
Structured journal exports so finance is not re-keying the day's trading, digital receipts and alerts through your existing SMS and email providers, and a documented API so a treasury dashboard or wider ERP reads from one source of truth.
Security, Audit Integrity and NDPA Data Protection
A bureau de change holds two things criminals want: cash and identity documents. Under the Nigeria Data Protection Act 2023, enforced by the Nigeria Data Protection Commission, you are a data controller handling names, BVNs, ID documents and financial history, with obligations on lawful basis, security, retention and breach handling. We engineer for that from day one:
Encryption and controlled data handling
Transport encryption everywhere, encryption at rest for the database and uploaded identity documents, hashed credentials, and access-controlled document storage where every retrieval is logged.
Least privilege and strong authentication
Role-based permissions, enforced password policy, two-factor authentication for privileged users, session timeouts on counter machines, and immediate revocation when a staff member leaves.
Tamper-evident logging and retention
Append-only logs that operational users cannot edit or delete, covering data access as well as data change, plus retention schedules that satisfy statutory record-keeping while meeting NDPA obligations on data no longer needed.
Backups, recovery and hosting you choose
Automated encrypted backups with tested restores, a documented recovery objective, and cloud or on-premise hosting to suit your policy. You own the software and the data.
The same discipline runs through everything we build in regulated finance — see our fintech app development in Nigeria service page for the wider stack.
What Bureau de Change Software Costs in Nigeria
We scope and quote per project, but buyers deserve real numbers rather than "contact us for pricing". A custom Musskart BDC build runs from ₦3,000,000 to about ₦15,000,000 depending on branch count, module scope and integrations.
BDC Core
From ₦3,000,000
Single-branch operation: KYC and BVN capture, buy and sell recording, rate control, serialised receipts, till and cash position with daily reconciliation, audit trail and core reports.
Core + Compliance & Branches
₦6,000,000 – ₦10,000,000
Core plus the AML engine with CTR/STR case management, configurable CBN returns rendition and archive, multi-branch and multi-till consolidation, maker-checker approvals and full exports.
Enterprise BDC Platform
₦10,000,000 – ₦15,000,000
Tier-1 scale branch network, treasury and position management, external integrations, hardened hosting with disaster recovery, and priority SLA support.
Prices cover discovery, design, build, testing, staff training and go-live support. Hosting, third-party verification fees and annual support and maintenance are quoted separately — support covers monitoring, updates, adjustments when a reporting format changes, and a helpdesk your branch staff can actually reach. For the full breakdown, see our full pricing, or message us on WhatsApp for a firm figure the same day.
How the Build Runs — From Kickoff to Go-Live
A licensed operation cannot afford a chaotic software project, so we run it in phases with your compliance officer involved throughout.
Week 1–2 — Discovery and compliance mapping
We map your licence category, branch plan, currencies, counter workflow, approval hierarchy and the exact returns you must file, on what schedule and in what format. Compliance is designed in here, not bolted on later.
Week 2–4 — Design and prototype
Screen-by-screen design of the counter flow, KYC capture, till operations, compliance queue and dashboards. Your cashiers walk a clickable prototype first, because counter speed decides whether staff use the system.
Week 4–10 — Build in sprints
Transaction core first, then cash and till control, then compliance and reporting, then branch consolidation and integrations. You see working software every two weeks, while changes are still cheap.
Testing, security review and data migration
Functional testing against real trading scenarios, reconciliation testing to the last kobo, access-control and security review, and migration of your existing records with a verification pass.
Training and go-live
Hands-on training for cashiers, branch managers and compliance staff, written procedures for daily open and close, and a supervised parallel run before you cut over fully.
Support and regulatory upkeep
Post-launch monitoring, a support channel your team reaches on WhatsApp and by phone, and template updates when a reporting requirement changes.
Typical timelines: a single-branch core in about 8 to 12 weeks; core plus full compliance, returns and multi-branch in three to four months; an enterprise rollout with integrations in four to six months.
Why BDC Operators Choose Musskart
Operators choose us because we pair engineering depth with local presence and accountability.
A registered Nigerian company since 2020
Musskart Technology Limited is headquartered in Asaba, Delta State — a real company you can visit and hold to a contract, with 250+ projects delivered across web, mobile and AI.
Custom-built, owned by you
You own the source code and the data. No per-transaction subscription trap, and no vendor deciding when your reporting format gets updated.
Compliance-first engineering
We build regulated financial systems for a living. Reporting, audit trail and access control are designed from discovery, so an examination is an export rather than an emergency.
Reachable when it matters
When the system your counters run on has a question at 8am, responsiveness is everything. We are reachable on WhatsApp and by phone, and we reply within minutes.
An Important Compliance Note
Musskart Technology Limited is a software development company, not a regulator, licensor or certification body. We are not accredited by, affiliated with or acting on behalf of the Central Bank of Nigeria, the Nigerian Financial Intelligence Unit, SCUML or the Nigeria Data Protection Commission, and we neither issue nor guarantee any licence or approval. Musskart builds the technology; your company holds the CBN bureau de change licence and obtains it directly by satisfying the CBN's own requirements. AML registration and reporting obligations likewise sit with your company and its designated compliance officer. Regulatory requirements change — always verify current guidelines, thresholds and formats with the CBN and your compliance adviser before relying on any figure on this page.
Frequently Asked Questions
Related Musskart Guides
- Fintech App Development in Nigeria — the wider regulated payments and wallet stack
- Microfinance & Core Banking Software Development in Nigeria — for deposit-taking institutions
- Musskart Pricing — full breakdown across all our services
- Contact Musskart — book a scoping call
- More from the Musskart blog
Ready to Build Your BDC Operations System?
Whether you are a newly licensed Tier-2 operator opening your first counter or a Tier-1 BDC rolling out a branch network, Musskart builds the transaction, compliance and reporting system your licence depends on. Start on WhatsApp — we reply within minutes.
