Introduction
The regulation of financial technology ("fintech") in Nigeria has, in recent years, developed into one of the more sophisticated licensing regimes on the African continent. As fintech operators have expanded the frontiers of payments, lending, and financial inclusion, the Central Bank of Nigeria (the "CBN" or the "Bank") has correspondingly refined the licensing categories and compliance obligations applicable to various fintech ventures within the country. As a threshold matter, incorporation (with the Corporate Affairs Commission) confers corporate personality only; it does not confer regulatory authorisation. An entity offering payment or financial services without the licence appropriate to its activity operates in contravention of the Banks and Other Financial Institutions Act 2020 and the regulations and guidelines made under it, exposing the entity, its directors and its officers to regulatory and criminal sanction.
This article is intended as general guidance on the licensing options available to fintech businesses operating in Nigeria. It considers, in turn: (i) the legal and regulatory architecture within which fintech businesses in Nigeria operate; (ii) the specific licence categories available, and the criteria for selecting the correct one; and (iii) the compliance pitfalls that most commonly result in regulatory sanction.
Overview of the Legal and Regulatory Framework for CBN Licences
Fintech in Nigeria sits at the intersection of several regulatory regimes, reflecting the sector's cross-cutting nature: payments, banking, telecommunications, data protection, securities, and consumer protection all bear on a typical fintech's operations. As primary regulator of payments and most fintech activity, the CBN has issued a body of sector-specific guidelines, issued in exercise of its powers under the Central Bank of Nigeria Act 2007 and the Banks and Other Financial Institutions Act 2020 (BOFIA 2020), to govern the operations of fintech companies. Those guidelines take effect as subsidiary legislation and fall to be read alongside the Nigeria Data Protection Act 2023, the Money Laundering (Prevention and Prohibition) Act 2022 and, where a product touches on securities or collective investment activity, the Investments and Securities Act and the rules of the Securities and Exchange Commission.
Licence Categories and Requirements
1. Payment Service Provider ("PSP") Licence
The Bank issues the Payment Service Provider licence to companies providing electronic payment solutions, internet banking, and mobile money services. To regulate the operations of PSPs, the CBN issued a circular dated 9 December 2020 to all Payment Service Providers , Banks and other Financial Institutions approving new licence categorisations for payment systems. The Circular streamlines payment system licences into four broad categories: Switching and Processing; Mobile Money Operations; Payment Solution Services; and Regulatory Sandbox. Within the Payment Solution Services category, an applicant may hold the PSSP, PTSP or Super Agent licence singly, or a combination of the three under a consolidated Payment Solution Services licence carrying a higher minimum capital requirement of ₦250,000,000 (Two Hundred and Fifty Million Naira). A company seeking to combine activities falling within both the Switching and Processing and the Mobile Money Operations categories may do so only through a payments service holding company licensed under the Guidelines for Licensing and Regulation of Payments Service Holding Companies in Nigeria 2021, with the regulated activities carried on by separate subsidiaries.
Certain requirements are common across all PSP sub-categories, and are worth setting out once before turning to category-specific detail:
a. Corporate and Governance Requirements: The applicant must be duly incorporated in Nigeria, with a corporate governance structure meeting the Bank's requirements, and with its objects and issued share capital tailored to the specific licence category sought. Directors, shareholders, and key management personnel are subject to "fit and proper" assessment addressing integrity, competence, and financial soundness, and may be interviewed by relevant security agencies as part of background verification.
b. Financial requirements: Each PSP subcategory carries a minimum shareholders' funds requirement and a corresponding escrow deposit, lodged with the Bank for the duration of the application and refunded, together with any accrued interest, upon final licence grant or rejection of the application. These two obligations are financially and legally distinct, and applicants should not treat the escrow deposit as available working capital at any point prior to its release.
c. Documentary Requirements: The documents ordinarily required in support of a PSP application include the certificate of incorporation; three years of tax clearance certificates; details of the shareholding structure; CV s of board and management personnel; the organogram and employee count; a five-year business plan and financial projections; IT policies covering privacy, data protection, backup, and security; an Enterprise Risk Management Framework; a Contingency and Disaster Recovery Plan; and draft agreements with technical partners, settlement banks, merchants, and telecommunications partners as applicable.
d. Application Process: Applicants are well served by pre-application engagement with the Bank, or with experienced regulatory counsel, to clarify category-specific requirements before formal submission. The shareholders' funds deposit is ordinarily required immediately upon submission of the formal application, following which the Bank conducts due diligence and background checks on the applicant’s directors, shareholders, and management, and may carry out an on-site inspection of the applicant's premises before granting approval. Post-licensure, all categories are subject to ongoing reporting obligations, risk management standards, and any further guidelines the Bank may issue from time to time.
A. Switching and Processing Licence
This licence authorises card processing, transaction clearing and settlement agency services, and the operation of a payment gateway linking multiple payment channels, in effect, the infrastructural backbone connecting banks, processors, and other scheme participants. Permitted activities include switching, card processing, transaction clearing and settlement agency services, non-bank acquiring services, and the activities of super agents, PTSPs, and PSSPs.
Capital Requirements: Minimum shareholders' funds of ₦2,000,000,000 (Two Billion Naira) unimpaired by losses, together with a refundable escrow deposit of ₦2,000,000,000 (Two Billion Naira) paid in one lump sum into the Bank's PSP Share Capital Deposit Account.
B. Mobile Money Operator ("MMO") Licence
The MMO licence authorises the offering of mobile money services, including electronic wallets, funds transfer, and bill payment functionality, and is the only PSP category permitted to hold customer funds and issue electronic money.
Capital Requirements: Minimum shareholders' funds of ₦2,000,000,000 (Two Billion Naira) unimpaired by losses, and a refundable escrow deposit of ₦2,000,000,000 (Two Billion Naira) into the Bank's PSP Share Capital Deposit Account.
C. Payment Solution Service Provider ("PSSP") Licence
The PSSP licence, which is issued and supervised by the Bank, authorises payment processing and switching services for electronic transactions, and is the typical entry point for payment gateway and merchant processing businesses. Where the model depends on telecommunications infrastructure or value added services, separate authorisation from the Nigerian Communications Commission ("NCC") may also be required. A PSSP may not hold customer funds or issue e-money; a business model contemplating stored value should instead be structured under the MMO licence.
Capital Requirements: Minimum shareholders' funds of ₦100,000,000 (One Hundred Million Naira) unimpaired by losses, and a refundable escrow deposit of ₦100,000,000 (One Hundred Million Naira) into the Bank's PSP Share Capital Deposit Account.
D. Payment Terminal Service Provider ("PTSP") Licence
The PTSP licence authorises the deployment, ownership, maintenance and servicing of point-of-sale terminals and the provision of related payment terminal services.
Capital Requirements: Minimum shareholders' funds of ₦100,000,000 (One Hundred Million Naira) unimpaired by losses, and a refundable escrow deposit of ₦100,000,000 (One Hundred Million Naira) into the Bank's PSP Share Capital Deposit Account.
E. Super Agent Licence
The Super Agent licence authorises the recruitment, training, and management of agent networks delivering cash-in, cash-out, and related basic financial services, and is available to a company duly incorporated in Nigeria whose Memorandum and Articles of Association restrict its objects to the permissible activities of a Super Agent.
Capital Requirements: Shareholders' funds of ₦50,000,000 (Fifty Million Naira) unimpaired by losses, together with a refundable escrow deposit of ₦50,000,000 (Fifty Million Naira) paid in one lump sum, in the applicant company's own name, into the Bank's PSP Share Capital Deposit Account. Escrowed funds are ordinarily invested in treasury bills, subject to instrument availability, and refunded accordingly.
F. Regulatory Sandbox
The issuance of the Framework for Regulatory Sandbox Operations by the Central Bank of Nigeria on 13 January 2021 was a significant development in Nigeria’s fintech industry. The Bank's Regulatory Sandbox provides a supervised environment within which fintech operators may live test innovative products, services, delivery channels, or business models, with appropriate safeguards, before full licensing. Applications are made in response to a call for applications published by the Bank, through its regulatory sandbox platform and under cover of a letter addressed to the Director, Payments System Management Department, and applicants are expected to submit board approval (where applicable), incorporation and company profile documentation, CVs of board and management, a project plan and business proposal setting out anticipated outcomes, a sandbox testing strategy together with an AML/CFT policy, and proof of any relevant intellectual property rights. The Bank informs applicants of the outcome within 45 (forty-five) working days of the closure of the application window, and successful applicants receive a Letter of Approval to commence testing. Sandbox participants remain subject to ongoing filing and reporting obligations during the testing period, defined exit conditions, and evaluation on conclusion of the sandbox term; the Bank may relax specific regulatory requirements for the duration of the sandbox, but participants must satisfy all standard legal and regulatory requirements applicable to their activity upon exit. Admission to the sandbox is not a licence and confers no authority to carry on regulated activity beyond the terms of the Letter of Approval.
2. Payment Service Bank ("PSB") Licence
The CBN, in a bid to promote financial inclusion and enhance access to financial services for low income earners and unbanked segments in society issued the Guidelines for Licensing and Regulation of Payment Service Banks in Nigeria via a circular dated 26 October 2018. Those guidelines were superseded by the Approved Reviewed Guidelines for Licensing and Regulation of Payment Service Banks in Nigeria issued on 27 August 2020, which are the extant instrument and which, among other things, admitted switching companies as eligible promoters. The PSB licence permits the licensee to leverage technology and agency banking to extend deposit and payment/remittance services to unbanked and underbanked populations, with a particular statutory orientation toward rural and hard-to-reach areas, in furtherance of the Bank's financial inclusion objectives.
Capital Requirements: Minimum shareholders' funds unimpaired by losses of ₦5 billion.
Licensing Application Process: Application is addressed to the Governor of the Bank, with a formal presentation of the proposal to the Director, Financial Policy and Regulation Department, and is accompanied by a non-refundable ₦500,000 (Five Hundred Thousand Naira) application fee, with a further ₦2,000,000 (Two Million Naira) final licence fee payable before issuance of the commercial licence. The application proceeds through an Approval-in-Principle (AIP) stage; the proposed bank may not be registered with the Corporate Affairs Commission until the AIP has been issued in writing, and the promoters must apply for the final licence not later than six months after the grant of the AIP. Ongoing compliance obligations extend, in this category, to the Bank's financial inclusion targets in addition to the standard data protection, KYC /AML, and consumer protection requirements.
Documentary requirements: These mirror the general PSP set, adapted for PSB activity, and are supplemented by three years of audited financial statements (rather than tax clearance certificates alone), evidence that at least 25% (twenty-five percent) of the applicant's proposed access points will be located in rural or underserved areas, and, where the applicant proposes to issue payment cards, evidence of its arrangement with a card scheme operator.
3. Alternative Lending / Digital Credit
Digital lending platforms commonly styled "loan apps" offering non-collateralised micro credit facilities fall outside the PSP framework and are instead regulated according to the licensing route the operator elects:
A. Moneylenders Licence:
Application to the relevant state authority (for example, the Ministry of Home Affairs in Lagos State) under the applicable state Moneylenders Law, involving completion of Moneylenders Ordinance Form B, payment of an application fee, and annual renewal The licence is state-specific: an operator lending nationally must be licensed in each state in which it carries on business.
B. Finance Company Licence:
Application is made in writing to the Governor of the Bank under the Revised Guidelines for Finance Companies, and requires a minimum share capital of ₦100,000,000 (One Hundred Million Naira), together with a comprehensive IT policy, a five-year business plan, an Enterprise Risk Management plan, a Dispute Resolution Framework, and detailed disclosure regarding any technical or IT service providers engaged by the applicant.
Irrespective of route, digital lenders must additionally comply with the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation 2019, register with the Federal Competition and Consumer Protection Commission ("FCCPC") under its Limited Interim Regulatory/Registration Framework and Guidelines for Digital Lending 2022, maintain robust cybersecurity controls over customer data, and apply thorough customer due diligence measures to guard against fraud. Standard documentation — certificate of incorporation, tax clearance certificates, shareholding and management details, organisational structure, business plan and financial projections, IT policies, and risk and compliance frameworks, is required on both routes.
4. International Money Transfer Operator ("IMTO") Licence
The IMTO licence authorises a company to facilitate the transfer of funds from individuals or entities resident abroad to recipients in Nigeria and is governed by the Bank's Guidelines on International Money Transfer Services in Nigeria, issued on 31 January 2024. The 2024 Guidelines materially narrowed the scope of the licence: IMTOs are restricted to processing inbound remittances only, with outbound cross border transfers handled through other authorised channels. The Guidelines also, notably, do not extend IMTO eligibility to fintechs or to deposit money banks in their own right; such entities may partner with a licensed IMTO as agents, but may not themselves hold the licence. Prohibited activities for IMTOs include deposit taking or lending, maintaining current accounts for customers, establishing letters of credit, acting as custodian of funds, dealing in gold or other precious metals as an authorised dealer, and purchasing foreign exchange from the domestic market for settlement purposes.
Capital Requirements: A minimum share capital of US$1,000,000 for foreign applicants, evidenced in the applicant's latest audited financial statements, or the naira equivalent for indigenous applicants.
Licensing Application Process: The Guidelines introduced a two-phase process; an Approval-in-Principle (AIP) stage and a subsequent Final Approval stage, commencing with a written application to the Director, Trade and Exchange Department, CBN, accompanied by a non-refundable application fee of ₦10,000,000 (Ten Million Naira), a substantial increase from the ₦500,000 (Five Hundred Thousand Naira) fee under the 2014 regime. Following grant of the AIP, the applicant must submit its application for Final Approval within three months, including the names of local agent bank(s) and copies of the agency agreement(s), and a detailed business plan. The licence is subject to annual renewal for a further ₦10,000,000 (Ten Million Naira) fee, payable by 31 January each year. An AIP does not authorise the commencement of commercial operations; it permits only pre-operational steps, such as the opening of bank accounts.
Documentary Requirements: include evidence of the applicant's approval to operate, or agency agreements, in other jurisdictions; incorporation documents and tax clearance certificates (for indigenous applicants); a company and management profile, including CVs and biodata of board and management; and credit reports on shareholders and key officers obtained from a licensed credit bureau. Where an indigenous IMTO engages a foreign technical partner, the Bank's prior approval is required, and the technical partner must itself be a licensed, established money transfer business in its home jurisdiction with a minimum net worth of US$1,000,000 (One Million United States Dollars).
Recurring Compliance Pitfalls of Fintechs
i. Wrong Categorisation at the Outset: Applicants frequently pursue the less capital intensive PSSP licence before recognising that their product requires wallet or stored value functionality reserved to MMO licensees. Correcting the error of categorisation is rarely a matter of simple amendment; it typically necessitates a fresh application under a different, more heavily capitalised category.
ii. Unauthorised Holding of Customer Funds: Only MMOs may hold customer funds or issue e-money. PSSPs, PTSPs, Super Agents, and switching operators that allow funds to rest, even transiently, in their own accounts are operating outside the scope of their authorisation.
iii. Treating the Escrow Deposit as Available Capital: The escrow deposit is held by the Bank for the duration of the application and is not, at any stage prior to refund, available for operational deployment. Internal reallocation of these funds is a compliance breach independent of any licensing consequence.
iv. Overlooking Parallel Data Protection Obligations: A fintech processing personal data at scale is likely to qualify as a Data Controller of Major Importance under the Nigeria Data Protection Act, triggering separate registration with the Nigeria Data Protection Commission, appointment of a Data Protection Officer, and annual compliance audit filings. CBN or Securities and Exchange Commission licensure does not discharge this distinct obligation.
v. Reliance on Partner Infrastructure as a Substitute for Licensure: A commercial arrangement with a licensed bank, PSP, or card scheme does not extend that counterparty's authorisation to the fintech itself; the Bank requires prior approval of such collaborative arrangements, and this is frequently overlooked at the structuring and even scale stage.
vi. Neglect of the AML/CFT Architecture: Licensure is the beginning of the compliance obligation, not the end of it. An operator within the Bank’s regulatory perimeter is expected to appoint a compliance officer, adopt and implement a board-approved AML/CFT policy, carry out customer due diligence and sanctions screening, and render currency and suspicious transaction reports to the Nigerian Financial Intelligence Unit. Deficiencies of this kind are a frequent source of monetary penalties and of directions restricting business, quite apart from any question of licensing.
Conclusion
Nigeria's fintech licensing landscape is deliberately categorised by function, what an entity does with customer funds, data, and infrastructure, rather than by how it markets itself. Correct categorisation at the outset and early integration of legal and compliance infrastructure remain considerably less costly than remediating a licensing mismatch after a product has already gone to market.
This article is for general information only. It does not constitute legal advice and should not be acted upon as such.
Specific advice should be taken on the facts of any particular matter.
