Skip to content
Case study · Public institutions

Forensic revenue assurance across banks and fintechs

Secure API submission of EMTL, withholding tax and VAT transaction data by financial institutions, validated against compliance rules, with reporting, audit and secure storage, bringing banks and fintechs onto the RevAssured platform.

Client
NRS (formerly FIRS)
Engagement
Awarded October 2025 · three-year engagement
Status
Ongoing.
The challenge

What had to be solved

Revenue from transaction taxes depends on data held by banks and fintechs. NRS needs that data submitted securely, checked against the rules and kept in a form that can be audited.

  • Electronic Money Transfer Levy (EMTL)
  • Withholding tax
  • Value added tax
Scope

Scope of the engagement

  1. Secure API submission of EMTL, withholding tax and VAT transaction data

  2. Validation against compliance rules

  3. Reporting and audit

  4. Secure storage

  5. Onboarding banks and fintechs onto the RevAssured platform

Approach

How we approached it

A three-year engagement delivered as software: requirements first, then iterative development with demonstrations at each stage.

Discovery
Requirements, data definitions and the technical architecture agreed before build.
Design
Interfaces, database schema and API contracts defined for the institutions submitting data.
Iterative build
Development in sprints with regular demonstrations.
Testing and acceptance
Automated and manual testing, then user acceptance testing with the client.
Architecture

Solution architecture

Financial institutions submit transaction data through an API. Each submission is validated, stored securely and made available for reporting and audit.

Submission API
Receives EMTL, withholding tax and VAT data from banks and fintechs.
Validation
Checks each submission against the compliance rules.
Secure storage
Retains submissions for audit.
Reporting and audit
Gives NRS a view of submissions and exceptions.
Security

Security and compliance

Secure submission
Institutions submit data over an authenticated API.
Secure storage
Submissions are stored securely and retained for audit.
Audit trail
Submissions and validation results are recorded for audit.
Results

Results and status

StatusOngoing.

Related work

Engagements in the same field.

  1. FERMA

    PRMS Phase II software development

    Software development for Phase II of the PRMS programme.

    OutcomeDeployment completed.

    Government & public institutionsRoad infrastructureDigital Engineering

  2. NRS (formerly FIRS)

    Awarded October 2025

    Engaged as independent consultant for assurance testing of the Merchant Buyer Solution (MBS) e-invoicing system: penetration testing and vulnerability assessment, a privacy impact assessment, performance and stress testing, functional and integration testing, and audit-trail and disaster-recovery assurance.

    OutcomeAssurance testing completed.

    Government & public institutionsIdentity & E-invoicingCybersecurity & Data Protection

  3. PTDF

    NIN verification and API services supporting scholarship applications, delivered through Verifio, our verification platform, with checks made through a licensed partner.

    OutcomeDeployment completed.

    Government & public institutionsEducation & scholarship administrationIdentity & E-invoicing

Facing a similar problem?

Tell us what has to work and what it has to connect to. We will tell you plainly what it involves.