NTAA 2026 Section 45: the ₦5M-per-vendor rule your accountant probably has not flagged yet

The Nigerian Tax Administration Act 2026 carries a rule that most small business founders I have spoken to in the last two weeks have never heard of. It is called Section 45. It is in force. And it can cost ₦5,000,000 per vendor if you are not careful about who you pay.

This post is a plain-English walk-through of what the rule actually says, who it applies to, the small thing you can check in under a minute, and the bigger picture about how Nigerian SMEs are expected to adapt.

What Section 45 actually says

The rule itself is simple. Before you engage a vendor for a service or a product that your business will pay for, you are expected to confirm that vendor has a valid Tax Identification Number on file with the National Revenue Service.

If you engage the vendor anyway, and it later turns out the vendor does not have a valid NRS TIN, the penalty attaches to you. The business that engaged the unregistered vendor pays.

The penalty is ₦5,000,000 per vendor. Not per violation. Not per payment. Per vendor you engaged. If your payable list at the end of the quarter has fifteen vendors and two of them turn out to be unregistered, you are looking at a ₦10,000,000 exposure before any mitigation.

Who it applies to

Any business registered in Nigeria that pays vendors for services, supplies, or deliverables is within scope. That covers most of the people reading this. It applies whether the vendor is Nigerian or foreign, whether the payment is one-off or recurring, and whether the amount is ₦50,000 for a meal delivery or ₦50,000,000 for a construction contract.

The NRS does not care how big the invoice is. It cares whether the vendor is registered in the tax system. If you engaged someone to do work for you and paid them, you need to know their TIN exists and is active.

A handful of edge cases are out of scope for now, primarily casual labor under a threshold and foreign vendors with no Nigerian presence. The practical rule of thumb: if you are issuing a proper invoice or expense report for it, Section 45 applies.

What your accountant probably already checks, and where the gap is

Good accountants have been checking TINs for large invoices for years. The check itself is not new. What is new is the scope: Section 45 now expects every vendor, not just the big ones. And the penalty tier has moved from "you pay some tax correction" to a flat ₦5M per missed check.

Here is the gap I keep running into when I talk to Nigerian finance teams.

A vendor gets verified once, when they are first onboarded. The check gets saved in a spreadsheet. Two years later, the vendor is delisted by NRS for not filing returns or for a compliance issue on their end. The finance team does not know, because nobody ran the check a second time.

From the NRS's perspective, that vendor has an unregistered TIN at the moment you paid them. From your perspective, you remember verifying them. The penalty attaches anyway.

The only compliance position that actually survives an NRS audit is a recent, timestamped check. Saved in a spreadsheet from two years ago is not sufficient on its own.

The one-minute check before your next payment run

Before you release your next vendor payment batch, open a spreadsheet of all the vendors you intend to pay and run this mental filter.

1. Do I have a TIN on file for this vendor?
2. Has anyone verified that TIN against the NRS register in the last 90 days?
3. If the vendor trades under a different name than the one on their TIN certificate, am I sure the same legal entity is being paid?

If the answer to any of those is "no" or "I am not sure", pause that row. Do not hold up the whole payment run on one vendor, but do not pay that specific vendor until the TIN check is done.

You can run the check manually at the NRS's TIN verification portal, one vendor at a time, typing in the RC number and confirming the status. It works. It just takes a couple of minutes per vendor, and most finance teams simply do not have that time at scale.

The name-mismatch trap

Here is a quieter failure mode that trips even the most diligent accountants.

A vendor sends you an invoice that reads "Aliko Logistics". You match that against your onboarding record for "ALIKO LOGISTICS SERVICES NIG LTD". The TIN you have on file is for the registered entity. You pay the invoice. The NRS ledger, because of its own matching rules, records the payment as going to a name that does not perfectly line up with your recorded vendor name.

If an audit picks this up, the easy thing for the auditor to argue is that you paid an entity whose identity is not cleanly verified. Section 45 exposure attaches.

The fix is boring but important. When you verify, save the exact registered name on the NRS register as a separate field. Use that field on your payment vouchers. Your accounting records and the NRS ledger should agree on the string level, not just the semantic level.

The recurring-vendor problem

If you have a cleaner, a printer, and a delivery company you pay every month, Section 45 is structurally expensive for you. You have multiple payment runs per year, per vendor, and you need a fresh check on each of them.

"Fresh" is the part most teams get wrong. The NRS register can change between your September check and your October payment. A good rule, until something more formal is set, is to re-verify at least once per quarter for any vendor you pay recurrently, and always to re-verify if a vendor goes silent for two months and then resurfaces with a new invoice.

This is the part that pushed us to build a tool for ourselves, which we then packaged and launched for other Nigerian SMEs. You do not have to use ours to solve the problem, but if you are running finance for a business with more than twenty recurring vendors, doing this by hand every quarter is the kind of work that quietly stops getting done.

What to actually do this week

Whether you use any vendor-verification tool or not, this week is a good time to do three things.

1. Pull your current vendor list. Not the onboarded-ever list. The list of vendors you paid in the last ninety days.
2. For each one, flag the TIN-verification date. Anything older than ninety days gets marked for re-verification before the next payment to that vendor.
3. Add a TIN field to your vendor-onboarding form. New vendors should not progress past onboarding without a valid NRS TIN captured and verified.

Those three steps get most Nigerian SMEs into a defensible position. They do not eliminate Section 45 risk entirely, but they move you from "exposed" to "good faith compliance" which is the line auditors draw their decisions against.

A note on how Section 45 reads in the bigger picture

This rule is part of a broader 2026 push to tighten vendor-level tax compliance across the Nigerian economy. The NRS has been clear for the last eighteen months that they want payment flows to be traceable by the identity of the payee, not just the payer. Section 45 is the enforcement lever for that. Expect more of these vendor-level rules as the year progresses.

The operational implication is simple. Businesses that treat vendor verification as a one-time onboarding step will keep getting caught. Businesses that treat it as an operational discipline, done before every payment run, will not.

It is the second kind of business you want to be. Not because the penalty is terrifying, although ₦5M-per-vendor is not nothing, but because the discipline itself tends to correlate with being the kind of operation that does not make other mistakes either.

Whatever you use to solve Section 45, please solve it. The penalty is large, the check is small, and the compliance position is simple to maintain once you have built the habit.