August 31, (THEWILL) — There are indications that Stanbic IBTC Holdings Plc is battling reputational challenges following two recent court judgements that came on the heels of identified N1.26bn in regulatory penalties over a five-year period as of December 31, 2025.
This development raises fresh questions about the quality of controls across the financial services group which banking subsidiary operates in the Tier-11 category of the Nigerian banking system.
Industry experts express concern that for a financial institution whose most valuable asset is neither its branches nor its technology but trust, repeated regulatory breaches can become considerably more expensive than the fines attached to them.
Stanbic IBTC group remains one of Nigeria’s largest and most profitable financial institutions. Its 2025 performance was formidable: total assets rose to N8.62 trillion, customer deposits reached N4.37 trillion, total income climbed to N895.7 billion, while return on equity stood at 42.4 per cent.
Yet, behind those impressive numbers is another set of figures that deserves closer scrutiny.
An earlier review of the group’s financial statements had shown that Stanbic IBTC and its subsidiaries incurred approximately N1.26 billion in regulatory penalties between 2021 and 2025—N233 million in 2021, N159 million in 2022, N159 million in 2023, N593 million in 2024 and N119 million in 2025.
While the series of regulatory infractions has raised concerns, the more consequential question is what the penalties say about the quality, consistency and effectiveness of controls across a complex financial institution. And that question has become more urgent following two court judgments in 2026 involving different parts of the group.
One concerned customer data privacy. The other concerned the handling of an erroneous pension contribution and the subsequent delay in processing a customer’s request.
Taken individually, the cases could be dismissed as isolated operational failures. Taken alongside five years of regulatory penalties, however, they raise a more uncomfortable question: Are control failures that should have been caught internally increasingly becoming matters that customers, regulators and courts are having to catch externally?
Two court judgments, two very different failures:
The first case involved Stanbic IBTC Bank and two former customers who alleged that the bank continued sending promotional messages to them after their banking relationship had ended and after they had asked the bank to stop processing their personal data for marketing purposes.
The FCT High Court in Abuja found that the continued retention and processing of their personal information for promotional purposes lacked a lawful basis under the Nigeria Data Protection Act, 2023.
The court held that the conduct violated the claimants’ privacy rights and constituted an unfair trade practice. It ordered Stanbic IBTC to pay N15 million in damages, plus N500,000 costs, and imposed a perpetual injunction against further unauthorised processing of the claimants’ data, subject to legally required record-retention obligations.
The monetary award itself is modest for a bank of Stanbic IBTC’s size. But the matter goes beyond that. Data privacy is fundamentally a control issue.
The more troubling element was the alleged continuation of data processing after the customers had ended the relationship and withdrawn consent, despite their communication to the bank.
That introduces questions about the effectiveness of controls linking customer relationship management, marketing databases, consent management, data-retention policies and compliance oversight.
A sophisticated bank should not need a court judgment to tell it that a customer who has withdrawn consent should no longer receive marketing communication, except where there is a clearly established lawful basis. The reputational risk therefore lies not in the N15 million award. It lies in what the episode tells customers about the bank’s ability to respect the boundaries around information entrusted to it.
Pension case More Revealing
The second judgment involved Stanbic IBTC Pension Managers Ltd and Mr Adefowowe Adebamowo. This case is particularly significant because it exposes a different dimension of operational control: the accuracy and reconciliation of customers’ pension accounts.
According to the judgment of the National Industrial Court, Adebamowo had left the employment of Access Bank in 2007, yet contributions continued to be remitted into his Retirement Savings Account for years, from July 2007 to April 2013.
The court found that the wrong remittances were made because Access Bank used the claimant’s RSA details for payments intended for another employee. But the judgment also scrutinised Stanbic IBTC Pension Managers’ role in failing to detect that the same RSA was receiving contributions from different employers over an extended period.
The consequences were not trivial. When Adebamowo sought to access 25 per cent of his pension savings in 2022, the erroneous contributions became an obstacle. He was initially informed that approximately N2.11 million needed to be backed out. He was subsequently told that the correct amount was N7.91 million, following a different calculation using Fund 1 pricing.
The court rejected the use of Fund 1 pricing retrospectively for periods when the fund structure did not exist. It held that the correct calculation should reflect the actual investment fund applicable at each relevant period.
More importantly, the judge was unequivocal about the control failure.
The court held that Stanbic IBTC Pension Managers should have noticed that the claimant was receiving contributions from two different employers and that the situation should have triggered questions.
The judgment described the failure to detect the erroneous remittances over more than five years as a “clear display of negligence and incompetence.” That is a devastating description for any institution whose business model depends on precision, fiduciary responsibility and customer confidence.
The court ultimately awarded N3 million in damages, with Stanbic IBTC Pension Managers, PenCom and Access Bank each ordered to pay N1 million. It also awarded N600,000 costs, shared equally. In other words, the control problem was not simply the existence of an error; it was the failure to identify and resolve the error promptly.
The N1.26bn Question
This is where the five-year penalty history becomes important. Stanbic IBTC’s regulatory sanctions have not been confined to one subsidiary or one regulator.
The 2025 financial statements show, among other things, a N3.9 million SEC penalty against Stanbic IBTC Asset Management relating to valuation methodology and erroneous disclosures; two N56 million CBN penalties; a N50.1 million SEC penalty involving Stanbic IBTC Capital’s role in a public offer; and a N104 million CBN penalty against Stanbic IBTC Bank relating to suspicious transaction reporting and customer due diligence. Earlier years produced other sanctions involving PenCom, SEC, NAICOM, tax authorities and the CBN.
Industry experts who spoke on the matter noted that the offences are different, but the distinction matters. When breaches recur across different businesses, regulators and control environments, the question changes from “Did an employee make an error?” to “Why did the institution’s control architecture fail to prevent, detect or escalate the error?”
A bank can have strong financial reporting controls while still having weaknesses in other equally vital areas. A proper root-cause review prevents recurrence. For Stanbic IBTC, the emerging pattern suggests that regulators and courts may increasingly become the final line of detection in areas where internal controls should have intervened much earlier.
When contacted on Tuesday, August 25, for comments concerning the identified internal control challenges at Stanbic IBTC, Media Craft Associates, Stanbic IBTC Group’s agency, asked for some time to provide the needed response.
However, it did not respond as of filing this report on Sunday, August 30, despite a reminder three days earlier when the agency said it was going to respond soon.
Reacting to the regulatory infractions report earlier, the Chairperson, Pragmatic Shareholders Association of Nigeria, Mrs Bisi Bakare had described the development as unfortunate and worrying, though not peculiar with Stanbic IBTC Bank.
She said some of the penalties are avoidable if the banks can be more proactive. “It is not peculiar with Stanbic IBTC Bank; other banks pay penalties. My candid advice to the management is to be proactive in their dealings,” she had said in a note to THEWILL.
Sam Diala is a Bloomberg Certified Financial Journalist with over a decade of experience in reporting Business and Economy. He is Business Editor at THEWILL Newspaper, and believes that work, not wishes, creates wealth.
